Deep Malware Analysis of 4a740b0113a3a6471c99939ba05a40d0 | md5: 4a740b0113a3a6471c99939ba05a40d0 | Zip Archive | LNK | Malicious | LOLBin | LOLBin:powershell.exe | Execution: CMD in LNK | T1059.003 | T1202: Indirect Command Execution | T1204.002 | Execution: PowerShell in LNK | T1059.001 | PowerShell | Batch Command | PowerShell Call

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	4a740b0113a3a6471c99939ba05a40d0
Sha1	e36057b84817aaf8c06a7fec8b979b65d393b08e
Sha256	402721c748dacb333b9e5961d59ee6e0581d2421211ba45389614a87c88d5dea
Sha384	f2e0bcb39654861e4068a9151a3b7ce22265e8165ac10fbe583c4b767a0380c7d2f7f3f8b17fd96fd46aad2dc1a81e6a
Sha512	434f86c74097b381372f22a9acd36e1f213556f920350e2aebf2025e9396df96abfa742b531a9e424376ccc4f4b08917551af7b72ed66f92677877c719d0bd72
SSDeep	192:hhf4a1K/Y794Pcq77KaE7b6Ge/FC/uvNafCVDV4Q3tAu3rhJ:h6aqYct77Kjfze/U/uvNZ9h9AAFJ
TLSH	7EF18EDA71F9D064E0942F782B5B8F8C0661201AE7D50387B51F40D9F87B5FEA9266CC

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1

bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd

Shape arc:zip>lnk>lnk:cmd

malicious 3 nodes

LNK: Command Execution UNKNWOWNmalicious

powershuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential