Deep Malware Analysis of 7e034642aa06dd01f80476fd027eb51e | md5: 7e034642aa06dd01f80476fd027eb51e | LNK | Malicious | LOLBin | LOLBin:cmd.exe | Execution: CMD in LNK | T1059.003 | T1202: Indirect Command Execution | T1204.002 | Execution: PowerShell in LNK | T1059.001 | PowerShell | Batch Command | PowerShell Call | T1027 | DeObfuscated

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	7e034642aa06dd01f80476fd027eb51e
Sha1	927315442d3cce6f101cd97df851df20ff619955
Sha256	4e81d94aa44752c3077a3f5039159f47797a3ffaa1def4d6147b657b79e0534c
Sha384	588d3da06a466be261f77d297b8c19e2f2d0b2991a7d25e8f2509bc9956c62ba76c2e0bee4f8b8965ef30512a243f7d9
Sha512	88e5e98df7d64cd7f7bafe00618063188901d87c549db6f1aa3dc5eedfb603fc509fae50459bb7ad3ae823d291e526bea1006b1c8be7952140ab1e2881b42b6d
SSDeep	6:4xtiy6LgolHKlFcnlj+SEEgykQLPfBMlpIoF6SaU/k1ARokJxt:8oyj4QkCikQLhMbHFMf8
TLSH	D911C2601BCB5A00F3F58B30BC3A921519647C2C89318B8D0385196C0C26A109826F36

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd>scr:ps1~T1027~T1059.001

Shape lnk>lnk:cmd>scr:ps1

malicious 3 nodes

Path lnk~T1059.001~T1059.003~T1202~T1204.002>scr:ps1~T1027~T1059.001

Shape lnk>scr:ps1

malicious 2 nodes

LNK: Command Execution UNKNWOWNmalicious

cmd.exhuhuhuhuhuhuhuhuhuhuhu

Deobfuscated PowerShell UNKNWOWNmalicious

"iex(ihuhuhuhuhuhuhuhuhuhuhu

Deobfuscated PowerShell UNKNWOWNmalicious

Invokehuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential