Deep Malware Analysis of 5702711dbfe48421e9643c300480ddd9 | md5: 5702711dbfe48421e9643c300480ddd9 | LNK | Malicious | LOLBin | LOLBin:powershell.exe | Execution: CMD in LNK | T1059.003 | T1202: Indirect Command Execution | T1204.002 | Execution: PowerShell in LNK | T1059.001 | PowerShell | Batch Command | PowerShell Call

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	5702711dbfe48421e9643c300480ddd9
Sha1	3f9e9237b59eb5b1918d040599e3cd22fc4ae8a7
Sha256	89c007edca81ba4cdbeb5e3301e0a1653a35f3387ec2a753e85f07458206c17f
Sha384	014a47a673f547b1ccc0e64beab62a35654feebb9f92ac2ef13df7fa9d732bdcc9ed855b411c87037ef39c0b2506a209
Sha512	b2910661bc55caa2ae19abaf36d90b501f78ea8a08803e56ade886664028b4575729338ea4b2efc96a9b666eb4ddf2a2d0120a08ebf70393b9be61424f50cd51
SSDeep	24:8pdmGjMDvSwjKUaWU3AcPWkp+/CWtGwvdbr4I0WK6c/6Cab7Oa7m:8jmeKpUQlnvhUIA6q6Cax
TLSH	8921B1211BF20369D6BB8B3568B6631187327E0ADB55CF9F13D092949964221F468F3B

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd

Shape lnk>lnk:cmd

malicious 2 nodes

LNK: Command Execution UNKNWOWNmalicious

powershuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential