Deep Malware Analysis of 4c7ed348985792ccfe9e81ef1bb18fc4 | md5: 4c7ed348985792ccfe9e81ef1bb18fc4 | Zip Archive | LNK | Malicious | LOLBin | LOLBin:cmd.exe | Execution: CMD in LNK | T1059.003 | T1202: Indirect Command Execution | T1204.002

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	4c7ed348985792ccfe9e81ef1bb18fc4
Sha1	189f5a7015ac3343d6dec865092a0c887554bb1f
Sha256	c813ae9775779b21b139e8d783fa5b60025038abc7df429b343ee9f11061820e
Sha384	990c40bccc333ef098d7b0847dc053530474bde70006a436646ffad96180c0883a01671853cf2133812361c3341c96b6
Sha512	df3839eea169d7efefa494bdb4ae3498b8c1c55ae660d454081e144e75ac21d08da43e511cd77755066dae0800093182849aafdc8f1d5791971a50143adcbbef
SSDeep	12:5j/gDh+pigSPFbT/4K4qZgTc0xERNM2tq20PxjYEecOmaoSt:9I9+sJRMpc06vWhPxmc5St
TLSH	91F0E1A7070A040BE58B547409DF253A4915F1123AABADC2C236EC0FE8C51A2456FB76

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path arc:zip>lnk~T1059.003~T1202~T1204.002

Shape arc:zip>lnk

malicious 2 nodes

LNK: Command Execution UNKNWOWNmalicious

cmd.exhuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential