Deep Malware Analysis of 5ca5a606709ffe95c5e826d176f5dc59 | md5: 5ca5a606709ffe95c5e826d176f5dc59 | Zip Archive | LNK | Malicious | LOLBin | LOLBin:powershell.exe | Execution: CMD in LNK | T1059.003 | T1202: Indirect Command Execution | T1204.002 | Execution: PowerShell in LNK | T1059.001 | PowerShell | Batch Command | PowerShell Call

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	5ca5a606709ffe95c5e826d176f5dc59
Sha1	24f0cc1e3394cb1058fa6e9589246f3d3be42d41
Sha256	d4d2b7e99fdc2ce7eca14986a189d974bb24e42fea69b4bf6424301146d869bd
Sha384	ff8704362397e7dd21b7abf557e2dd816215b204d517a8a4b4f05eb2c7d8575d9e516fadcd151b6eb0d8a86c093e247a
Sha512	e182969feace5eb0a0fc1ea7c231671faef492401a15a389cd8a62f8e28139d665b6dbeb7ac18e6fe71ba88e728e7b00ded0586bf911d0607ce182cda253262a
SSDeep	12:5jO4Nr5Yim1Mgj3HOw0a0lUwV55lycpd90vUMEsP77ZF/g7rJPdNQuaz:9DNaMaXOwCUu8cz90vUMEK/ZKZPdip
TLSH	A701863683643139CA7270302C118701402F45835314A37351F729952E5AB92132D0A0

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd

Shape arc:zip>lnk>lnk:cmd

malicious 3 nodes

LNK: Command Execution UNKNWOWNmalicious

powershuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential