Deep Malware Analysis of 7bf14df8aef9f0d21f2c30759f82dab5 | md5: 7bf14df8aef9f0d21f2c30759f82dab5 | Zip Archive | LNK | Malicious | Execution: PowerShell in LNK | T1059.001 | T1204.002 | PowerShell | Batch Command | PowerShell Call | T1027 | DeObfuscated

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	7bf14df8aef9f0d21f2c30759f82dab5
Sha1	349022ab858a125368e342204d136c1107c72aeb
Sha256	ee39f091a23c746763ff44a273d11307abe5ca531f363b5621dfaa695f39a37b
Sha384	3af58fa24642a965b1fb47873ae9568258a69934de0d59ac881120b1fd8e525861fd7686d31f81d7a80b4e0c3d2f4343
Sha512	74f0af02d0df035c9c6016669ffb6c1858da4dcd136766359180ff2759dc6bf4f57e6bfd5fb73d0230ad2fb889812b985d0bedca831e544d129852877677f499
SSDeep	48:9T03A6Z+GelqA5COYH5bq7+NTUzUCS7NzEVOVbFbIq+:TjlqA5COYHRM+l8TeNzu2FZ+
TLSH	8341CA0DF40DE025D29C17FD820FE857D601C41DF506B0B59E1DD1F99BA88634988D09

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path arc:zip>lnk~T1059.001~T1204.002>lnk:cmd>scr:ps1~T1027~T1059.001

Shape arc:zip>lnk>lnk:cmd>scr:ps1

malicious 4 nodes