Deep Malware Analysis of 3b3e85be5e0c92c5c972f881a8fafa13 | md5: 3b3e85be5e0c92c5c972f881a8fafa13 | LNK | Malicious | LOLBin | T1218: System Binary Proxy Execution | LOLBin:cmd.exe | Execution: CMD in LNK | T1059.003 | T1202: Indirect Command Execution | T1204.002

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	3b3e85be5e0c92c5c972f881a8fafa13
Sha1	f7070cb8d9fcf3855b45c4fa13a5dfb0f04cf5f6
Sha256	478c582b194638abe04b0ea024a4a47b303d1e248659a49f05556de3b8d14c13
Sha384	3504ea09afa58d0331c6bf94a6131c4fbc64e76ac7ed5e168de4e513da243606fe7de2d2440a597b4de8c54fddca7520
Sha512	2a14d85e5b51a38b62bd3a09fdc2b34f7374c3399171628d576fb92946cd323ebff01f5a4c73f1bfbe6325fedf901818edb55d5d8f1ee3e2841648563e3df1f3
SSDeep	192:8c81pQhi0ZLmN1i4KVrfZDLAfTnoTT2hOyCsmPiPxZCCPTm+pmctSVtrpaQqZBCx:VcWLS13ueKBwBPiemFVt72vAk9FF6
TLSH	6542BF505E295262D2AB1B3318A0F6FE9E33FADBD722A36D10415E134D13140CECAF5E

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path lnk~T1059.003~T1202~T1204.002~T1218

Shape lnk

malicious 1 nodes

LNK: Command Execution UNKNWOWNmalicious

cmd.exhuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential