Deep Malware Analysis of 3d518c1015963881090dfbde22f945b1 | md5: 3d518c1015963881090dfbde22f945b1 | Zip Archive | LNK | Malicious | LOLBin | LOLBin:powershell.exe | Execution: CMD in LNK | T1059.003 | T1202: Indirect Command Execution | T1204.002 | Execution: PowerShell in LNK | T1059.001 | PowerShell | Batch Command | PowerShell Call

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	3d518c1015963881090dfbde22f945b1
Sha1	8978bd2cba7231479d36383d91e30f88ee291f09
Sha256	d488f2d9c3a80c223eba8a5edcddd375e7eafe2c3299a6d824785959cf2025a1
Sha384	24ceea856c1d653c3ef2bfe424c7d3a5a075c5ae34ab0e4ae78fa72e83e148e10ca38ef9fb2cc735de9dc817a7660d5a
Sha512	bede750154efbd5d448b2e2a1c5b83546fdc090c1df6fddc24779a9c98f6f676821f9b38f973c5dcf0123f1a05d082e184aa28224222d1bd99add40a894a1499
SSDeep	384:TQPGpmkG1nh9GVNzFzQLOtZ7Y2qOXkTKE:cWslh9cWLOnDUN
TLSH	0662D178528916C0DE4342EB3860D3F6296AE787105F1B1B5E2225D3B13B42C6F4F99F

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1

bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd

Shape arc:zip>lnk>lnk:cmd

malicious 3 nodes

LNK: Command Execution UNKNWOWNmalicious

powershuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential