Deep Malware Analysis of 2fa1b723fc72b33e1fade0a62b260b40 | md5: 2fa1b723fc72b33e1fade0a62b260b40 | Zip Archive | LNK | Malicious | LOLBin | LOLBin:cmd.exe | Execution: CMD in LNK | T1059.003 | T1202: Indirect Command Execution | T1204.002

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	2fa1b723fc72b33e1fade0a62b260b40
Sha1	d2e850805d51c1d9c8c26e4f48146687d8134ad9
Sha256	ebd30a9a6910ad585f7e74c31f9b4932563f7347cc790fe142aaac88d9082ac7
Sha384	4d6d684d8efce9619f5349d8fcd2a291564cb696711e1cd15173dcf526c797e5309462ea04c3db2414c3f631498cb141
Sha512	445249c42087f6b88b8ea77e4cf943e200e0107a9f7879a8eaeb67635b96bcc0eeb7e40b8cce2b1865a10091493bc1fc1b1c4472083d61412a3c2b8b522b73d7
SSDeep	24:9IRix+d/DmE80O7tTLJbRbvkx9vBC4eNOzuRKw:9f+rdMLJVtjNKZw
TLSH	1F01CA7B1D02698ED349A6F54CF14905708085CCF47F757351A19FCED09C6575B412C4

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path arc:zip>lnk~T1059.003~T1202~T1204.002

Shape arc:zip>lnk

malicious 2 nodes

LNK: Command Execution UNKNWOWNmalicious

cmd.exhuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential