Deep Malware Analysis of 82de37c1caa86df521bcb588137985bc | md5: 82de37c1caa86df521bcb588137985bc | Zip Archive | LNK | Malicious | LOLBin | LOLBin:powershell.exe | Execution: CMD in LNK | T1059.003 | T1202: Indirect Command Execution | T1204.002 | Execution: PowerShell in LNK | T1059.001 | PowerShell | Batch Command | PowerShell Call

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	82de37c1caa86df521bcb588137985bc
Sha1	2d74c9d17c2d782a4e9418ec76eaae4480a6750d
Sha256	a8b1fe22429ed0bc451405f402cbada1cfa655dead3ec2853fb077c793105fb3
Sha384	cab38644248d7bd1543d62a3ce987570852cc85736f30885af2dbe0cce8ce37596108aacc5bb71063d7b4394d0629ee0
Sha512	8311bbcb3584edf99a71e095f1dfdb654cf60a61c0d7cf5050aa8a341e171c31951f77fb61c12393287e70813c8baf82a0cbdd7ca2f7b0673164613392f2f68a
SSDeep	96:02AHcoOjczByF5iTTWxsfMThbpKvdNTLW7QQep5ud9fLW:0BHc9Yz4F5WVolcvdsQu/S
TLSH	25A18D4C298E5CCBD5BF5A65BA4D68724F0F00CD23E274D1F89F1296199BF102419378

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1

bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd

Shape arc:zip>lnk>lnk:cmd

malicious 3 nodes

LNK: Command Execution UNKNWOWNmalicious

powershuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential