Deep Malware Analysis of 3dda3b1a633eefdb6fe72b2c9be1a49a | md5: 3dda3b1a633eefdb6fe72b2c9be1a49a | LNK | Malicious | LOLBin | T1218: System Binary Proxy Execution | LOLBin:cmd.exe | Execution: CMD in LNK | T1059.003 | T1202: Indirect Command Execution | T1204.002

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	3dda3b1a633eefdb6fe72b2c9be1a49a
Sha1	e6b92b925ec5cc8306f4f4ac046a6f01d5a339fa
Sha256	2076704cee6f9e18a5ef1ca0507ef097a48ad0341991daf7c7ad4c90bb9b6057
Sha384	2c4d1adb91f24ac324ade4e460c8d9564c756cfd090d6811ca73b106f43111d923f3e4d3826e56bf5e705ab760df049d
Sha512	741c708c599a6f618b8015e766a638c285b6ce366aaef3e7f489f1d55eba0168a271b4286d35d61f23573b0f26039c9690b4c83895ac54925d5ece02ddc1e648
SSDeep	24:8WVhJjSdWUMOAhA+/UeBUEDgQVIKLa3+/E4I0aPXAqqYqqVJyITm:8WRScnueBUEsQV83AIZQJYJt
TLSH	6E41ED001BC96B25D3B62E7E18BEE71255A6F882FEB6CF7D0231458D5851101EC34F3A

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path lnk~T1059.003~T1202~T1204.002~T1218

Shape lnk

malicious 1 nodes

LNK: Command Execution UNKNWOWNmalicious

cmd.exhuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential