Deep Malware Analysis of 7f8e0381fb124f6afa4f44b33da4c0c9 | md5: 7f8e0381fb124f6afa4f44b33da4c0c9 | Zip Archive | LNK | Malicious | LOLBin | LOLBin:cmd.exe | Execution: CMD in LNK | T1059.003 | T1202: Indirect Command Execution | T1204.002

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	7f8e0381fb124f6afa4f44b33da4c0c9
Sha1	cfc4a8c93e12b57634a0c0f2005624962a5a0d8c
Sha256	47fbcb8ca47acf57a9427be1c7a61655748cc1b36bc24fd362f5f6f572058f35
Sha384	a16c89e02d033442fa7071604243101254baa649bc49d49ced37cdf2bd8696a3b6dcb060e65a7e4b1cdbf26b356b05fe
Sha512	e32184f49a75e7829a3ff7807bb032c101d355fbe3ffef8e99d81af4be66737bd4520a70d6cb6a1fe190281986afd7b507ef93f936f4f45a352a30afb3a7d92b
SSDeep	12:5jj/U4vtjTylf11jIiecd29+Tp1PNtLoGIBE7vIHZ91kYaoSt:9j/F1Pyt11jIiecw9sXnPIBE7vIHZ91A
TLSH	1FF0A292674EA98CD272C1FFC871234E69284E48881956DC9569E1A72940485A205597

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path arc:zip>lnk~T1059.003~T1202~T1204.002

Shape arc:zip>lnk

malicious 2 nodes

LNK: Command Execution UNKNWOWNmalicious

cmd.exhuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential