Deep Malware Analysis of 7e22f8711cdde34974faba3962f083d7 | md5: 7e22f8711cdde34974faba3962f083d7 | Zip Archive | LNK | Malicious | LOLBin | LOLBin:powershell.exe | Execution: CMD in LNK | T1059.003 | T1202: Indirect Command Execution | T1204.002 | Execution: PowerShell in LNK | T1059.001 | PowerShell | Batch Command | PowerShell Call

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	7e22f8711cdde34974faba3962f083d7
Sha1	312ada3fe16fd964e30392f385f8ecb97d0e5914
Sha256	3b2e424b05b1b246905e1df35935f69e2fe723d3d8d02952fa1788e6dcff40b5
Sha384	76fc015e3311e7c823a63e1ed96fd4a5c52fae67451aea51d2823e5d8d18317e4d048fd066aec4392bb9fea0006772bd
Sha512	632a38e0a4cdeac628754bb25ce1101c23333a8552f5c02a1b7aad508719af0294adb9f64094aefaf5efd285902fe823b9602b040ada777561298f08c5201792
SSDeep	192:JfyQdR1f1gWc4Yxu/AqekhzZZnV/r9hQ2BznD6hWAeKyNT:sYR7c4YM/sktvVzU29Ce
TLSH	1912A08E50E32915CE3686BC297FAE6F96152ABB502B3D02CF401D49875FF653897302

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1

bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd

Shape arc:zip>lnk>lnk:cmd

malicious 3 nodes

LNK: Command Execution UNKNWOWNmalicious

powershuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential