Deep Malware Analysis of 6e0629d1913659e911ebe0b098315521 | md5: 6e0629d1913659e911ebe0b098315521 | Zip Archive | LNK | Malicious | LOLBin | LOLBin:cmd.exe | Execution: CMD in LNK | T1059.003 | T1202: Indirect Command Execution | T1204.002

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	6e0629d1913659e911ebe0b098315521
Sha1	99afb6cf4a4255700bcaa61843d980d5d01aacb2
Sha256	8c086661d76850a0909cac61a12ea387e67984abca824e233408a38208139e78
Sha384	5f1e6a667b12504218597609e3c09bd2ba6258b94a89be05242804a9cdb68329834bf8553e5703fc185244e20e2f6f9f
Sha512	cb51938c306fdd12fc2490dbd6f195b895093aaf96f4b3e2cd93269b41c575c89cbf4538c6d1ce6a90e00cfc877755f48d1f1af3728e7c026c239cac0bb8e108
SSDeep	12:5jhlLAdiQQdse4H04b6ajycJiVYO02WC9SUmzsZMXIwtecXGtaoM:9nAdiQZe4H5b1biVYO0ZCAUmzpX8c0M
TLSH	38F041A58B000A3FC606CAF1685A2AAC2359C4C4B51319D21F64F02BF8D19C0474891A

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path arc:zip>lnk~T1059.003~T1202~T1204.002

Shape arc:zip>lnk

malicious 2 nodes

LNK: Command Execution UNKNWOWNmalicious

cmd.exhuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential