Deep Malware Analysis of 5abc7d60d52c4421a8d712cbc2c4f63d | md5: 5abc7d60d52c4421a8d712cbc2c4f63d | Zip Archive | LNK | Malicious | LOLBin | LOLBin:powershell.exe | Execution: CMD in LNK | T1059.003 | T1202: Indirect Command Execution | T1204.002 | Execution: PowerShell in LNK | T1059.001 | PowerShell | Batch Command | PowerShell Call

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	5abc7d60d52c4421a8d712cbc2c4f63d
Sha1	b72ad605ed2988ce605b702c0538e89f5cfa15f5
Sha256	28de15b5a599796ffd8dfdc1735c0ba80c2c5ed07803e55bfccd3994877f6540
Sha384	565a2a5b0bc615edbc9b807bc2df36e4ea1f7fb0575e52c1c83f10e53ffb886b1f4b6e5fc12057a7408552d3dfd496f5
Sha512	827e9f5c3e8c5bada59e650c43aae177198ae58fb0abe9e2dc6d337b7e23bd9d6399dea6a5a8e67f23b72136d5c8b04447c5aeff1fb3bcb77320b494893ce4f6
SSDeep	24:9Vzeys9i1SMVlP7Yk9lpH6F8E3EhEc+KUukcSL59CXk8gTSL1xAF+Ilj2O5i/yBy:9VzC9yJjYgHi8kccdDmQF9Bi/WagmLmq
TLSH	894119FA5E24495DE4218AF021BF41B5446485A30A05F18F039E15383BD3947FBF39D7

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1

bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd

Shape arc:zip>lnk>lnk:cmd

malicious 3 nodes

LNK: Command Execution UNKNWOWNmalicious

powershuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential