Deep Malware Analysis of 3108fa58c20767c204e8d6a906db2b8c | md5: 3108fa58c20767c204e8d6a906db2b8c | LNK | Malicious | LOLBin | T1218: System Binary Proxy Execution | LOLBin:powershell.exe | Execution: CMD in LNK | T1059.003 | T1202: Indirect Command Execution | T1204.002 | Execution: PowerShell in LNK | T1059.001 | PowerShell | Batch Command | PowerShell Call | T1027 | DeObfuscated

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	3108fa58c20767c204e8d6a906db2b8c
Sha1	51cb2fd50f55f92a119b418a12755c9dd6e68f2c
Sha256	81fc9500e185a09cc89631b5a64c74c59a3e39f250c011b4b826252be5a56d44
Sha384	9e193d8206c360042e96ee8facfec8cb2363d1ae7e2f0927d51cf0b1a4577d4256fc1131b7dab425205abcc173b6672e
Sha512	c614b2e538823fcc32d36350d8b1ea36c5d4ae7c48fe157785d10cd43e7eacda4904d0fce0f7454f8449a457cf65be43e430d25f8559ec28ec22e4a245254f60
SSDeep	24:8yI1JV1rvYjK5hWxxMAKWkp+/CWP2+/CtVbvGse4I0WyISpK6+/CUMlIFTxSq+/d:8x1Jni/yHBBIGBU3Sq4Z
TLSH	1F41BE111BF11618E2B74B3A6CB6F3128736FD65ED128FDE428092491C64128F874F2F

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path lnk~T1059.001~T1059.003~T1202~T1204.002~T1218>lnk:cmd~T1027~T1059.001

Shape lnk>lnk:cmd

malicious 2 nodes

LNK: Command Execution UNKNWOWNmalicious

powershuhuhuhuhuhuhuhuhuhuhu

Deobfuscated PowerShell UNKNWOWNmalicious

Invokhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential