Deep Malware Analysis of 60b214fe5e829028cd2a72a103fc9cf8 | md5: 60b214fe5e829028cd2a72a103fc9cf8 | Zip Archive | LNK | Malicious | LOLBin | LOLBin:cmd.exe | Execution: CMD in LNK | T1059.003 | T1202: Indirect Command Execution | T1204.002

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	60b214fe5e829028cd2a72a103fc9cf8
Sha1	15388f187a345959929c390230ef36d9fc39eefb
Sha256	add9f75d4f83d6384ea786b77dda9bbc506f6d1d9c0a850b03f4e4a4eb9ba116
Sha384	9ab863d11cdf5844b9f530209c3e85decc787294f59089ab25dc0a18d7c53e002e6dd92db53c8220a0062bbb64ea3bb6
Sha512	65f3232c24b4a6696b11174b8cb8959d9a8bbc99084a4182149169e3936003c68f22aeeeb26dbf2392bce9931ce688611623d1a525fe2c3091889739675b81de
SSDeep	12:5j9PPDhAqBiu2O+/JBvTbnqhHbzRjVPSEY6CY2DS5W2c+Puiao6:9VP9Amiu2pbYXb6Q2D8Lc8X6
TLSH	F3F09D7382101904CF16B071731EBD54597D059D240F5D833331744F45D0E551BDF9B0

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path arc:zip>lnk~T1059.003~T1202~T1204.002

Shape arc:zip>lnk

malicious 2 nodes

LNK: Command Execution UNKNWOWNmalicious

cmd.exhuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential