Deep Malware Analysis of 40aefe81a240d4297144fb8de9413c6f | md5: 40aefe81a240d4297144fb8de9413c6f | Zip Archive | LNK | Malicious | LOLBin | LOLBin:powershell.exe | Execution: CMD in LNK | T1059.003 | T1202: Indirect Command Execution | T1204.002 | Execution: PowerShell in LNK | T1059.001 | PowerShell | Batch Command | PowerShell Call

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	40aefe81a240d4297144fb8de9413c6f
Sha1	2a1e0084f5accf2503b1bc9b38089f2b700cd702
Sha256	7ed7c1ada9f7e47b423d2d0ac5fab7db29ea1e99a93d5659f0a2b559c122a542
Sha384	c071c0c8c01c37a238c3a68ad17c4b385b2b10b8bf9d3ba2225e4dfde40218af6ef79156739ab9a6d31d69253df4ca4b
Sha512	bd3489be452456667638d0b7a215b7540cf97f3b2d1e20b04efd5ee56e7b5df09fae74851f1bcf416a0d2c6ac39a91c72dab0713f4b731a3c17f1f329c94ced1
SSDeep	192:a+pzIB6GPkvxjy6Ny8tvMxgqLHFyhMydSWw52ct29AZWW7zYkebM5GgDVx8gLoiR:a+C6G6by8uDIhNd5w72az/EUVLj4lVB6
TLSH	ED32C0076C6107035043DABD7022AF2FDA8F62591298A41366C78DBDB16A570BB837DC

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1

bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd

Shape arc:zip>lnk>lnk:cmd

malicious 3 nodes

LNK: Command Execution UNKNWOWNmalicious

powershuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential