Deep Malware Analysis of 5feae3e91bc07b93df52ddd6aad04ef1 | md5: 5feae3e91bc07b93df52ddd6aad04ef1 | Zip Archive | LNK | Malicious | LOLBin | LOLBin:powershell.exe | Execution: CMD in LNK | T1059.003 | T1202: Indirect Command Execution | T1204.002 | Execution: PowerShell in LNK | T1059.001 | PowerShell | Batch Command | PowerShell Call

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	5feae3e91bc07b93df52ddd6aad04ef1
Sha1	2f1cd84b367670de26c917e6fe45ed32b704e432
Sha256	215f0883841d7cc1ec1ab56ed633502ccbfc3e580f49f6b645bd4d503d82c111
Sha384	8f289b621e7eb3468c50963f1841e111621628d86127b64f0cc3ea35b39f4eb5568e47081b7b47d03fa8ace3f56459c5
Sha512	f0b5ad60cf3a6454e3c0128ac13a4d1c594c7b1cd3a11c65dff4721422f3c04a2b279e048c7b5beb63f9b1a3f1e9cdf5fedb7f479f2bed8607a0e503a29ddaed
SSDeep	192:42pcIFdcwtCq18mXTV/NJaVtbR18nmQDSTgDhrEOa5UEJ6viE+zT1FEUvazna:40c4dcwtCqzV/0FuSS7fEJIirzT7EUya
TLSH	0432BF6BA315EDC0E72B2659FF668CE7A42F40614DFD20E2FB149641F60DBA0402944D

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1

bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd

Shape arc:zip>lnk>lnk:cmd

malicious 3 nodes

LNK: Command Execution UNKNWOWNmalicious

powershuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential