Deep Malware Analysis of 44c53af6dc94c87249a87c1fc68794cd | md5: 44c53af6dc94c87249a87c1fc68794cd | Zip Archive | LNK | Malicious | LOLBin | LOLBin:powershell.exe | Execution: CMD in LNK | T1059.003 | T1202: Indirect Command Execution | T1204.002 | Execution: PowerShell in LNK | T1059.001 | PowerShell | Batch Command | PowerShell Call

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	44c53af6dc94c87249a87c1fc68794cd
Sha1	985dd467c2932bf4038aa467d042cee4e8663991
Sha256	fbd9b413dbc148d5b65d4d5dd395e0e5ca382dd78f90be504056d85fd1615dce
Sha384	3ba77279e79d6dc939f056133dd36de775f6095f41dd980857dd83c7fcd7788b2b2f5b827e098c826482f987b77155d5
Sha512	a85bbcb3eb35ea19d28f73bc060bd2d5967719fd19c923e8667dae4a4dba3e614f79cacd442fa9dc8ab1f2f0814525fa492c075e122bd1bfb3156ef43e1ad5ce
SSDeep	24:9mv5LxmdNZnwiuNw4jPZa/I0FqfVwdaf+8D7/QT+0x0ou5Gy0Y6a0Rd32keZm/TY:9myN3KP0vqfVwUW8np0K+yrfZiGHbLN
TLSH	C1413B691640E159DCC0A1B6F338369C131FBEB480EC97174F1C3E180BAB97099032C7

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1

bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd

Shape arc:zip>lnk>lnk:cmd

malicious 3 nodes

LNK: Command Execution UNKNWOWNmalicious

powershuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential