Deep Malware Analysis of 336d861178e3bde015c91c1e87a59059 | md5: 336d861178e3bde015c91c1e87a59059 | LNK | Malicious | LOLBin | LOLBin:cmd.exe | Execution: CMD in LNK | T1059.003 | T1202: Indirect Command Execution | T1204.002 | Execution: PowerShell in LNK | T1059.001 | PowerShell | Batch Command | PowerShell Call | T1027 | DeObfuscated

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	336d861178e3bde015c91c1e87a59059
Sha1	4184e883c605936cb964c8ec6ca30fc20a38c110
Sha256	81254cfb6f4eee19aed87a2a5d526654455e911cee51665739d572f698dc97f5
Sha384	5a91a4871b4eeff03d5aa1b882a331052971bcf633ba9c061ec922b4a991a9c859cf64115f1f0e0a05647f3ce3499e6f
Sha512	d969934890ff624545808a0ae2cbbccb128d3d2291c004f7e0bd9c1f315ea1cd3ffbfb6b8aa3dabecce06090d98b72c9fe0e507d7f8382b951519e9cb57b064b
SSDeep	6:4xtisdS2ndS2nHolHKlFcnlj+SEEgykQLPfBMlpIoF6SaU/k1ARokJxt:8oUXx4QkCikQLhMbHFMf8
TLSH	55112B301BCB5A00F3F54B35BC3EB3012975BC0C8D314ADD928519AC0C26A109C35F36

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd>scr:ps1~T1027~T1059.001

Shape lnk>lnk:cmd>scr:ps1

malicious 3 nodes

Path lnk~T1059.001~T1059.003~T1202~T1204.002>scr:ps1~T1027~T1059.001

Shape lnk>scr:ps1

malicious 2 nodes

LNK: Command Execution UNKNWOWNmalicious

cmd.exhuhuhuhuhuhuhuhuhuhuhu

Deobfuscated PowerShell UNKNWOWNmalicious

"iex(ihuhuhuhuhuhuhuhuhuhuhu

Deobfuscated PowerShell UNKNWOWNmalicious

Invokehuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential