Deep Malware Analysis of 4e1151dd79dabae691dac265f1f229a2 | md5: 4e1151dd79dabae691dac265f1f229a2 | LNK | Malicious | LOLBin | LOLBin:powershell.exe | Execution: CMD in LNK | T1059.003 | T1202: Indirect Command Execution | T1204.002 | Execution: PowerShell in LNK | T1059.001 | PowerShell | Batch Command | PowerShell Call

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	4e1151dd79dabae691dac265f1f229a2
Sha1	9642f8c43ea574ab1b3010ff83050468f9d3e83e
Sha256	b11880bbadb5a06cd44f60e08f48dd5592ad9add9377c81810f5216437415865
Sha384	1bc5fbcd5910347a1916b5a90c30e4013b844b5dee951f072ec5e5498caa145e2f6c6b3be3e63885e88e135ade0a9ff8
Sha512	b277fded6664ee7110a08f4f261af8983489d89c0bdadd9eccae584001363b84b1e7620c27dbcc03a3e3b724fe4f109c6e5fc57eb6779e28ea1afdd476d2a4ff
SSDeep	24:8E1seOZa+58aKKtHLhWiWAsuW5+/CWP2+/CybfY4I0WROkOFpK6+/CIabpz1vb3a:8E1qM+0CsXubIL3ABcatdMq4z
TLSH	B841902617E50715D3F68A3AA8F7F3124731B815ED528FDE4240D2C82C64129E875F5F

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 1 STICH kept: 1

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

1 / 1

Path lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd

Shape lnk>lnk:cmd

malicious 2 nodes

LNK: Command Execution UNKNWOWNmalicious

powershuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential