Deep Malware Analysis of 882337d5f33be2282c94c1253035603b | md5: 882337d5f33be2282c94c1253035603b | Zip Archive | LNK | Malicious | LOLBin | LOLBin:powershell.exe | Execution: CMD in LNK | T1059.003 | T1202: Indirect Command Execution | T1204.002 | Execution: PowerShell in LNK | T1059.001 | PowerShell | Batch Command | PowerShell Call

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	882337d5f33be2282c94c1253035603b
Sha1	d91b8bfb8d1ff6d356e8c4b7dc14f71acb9ea654
Sha256	35e85fade57a82fe8d27ef4f4b8fcf0fce1690be3a55b9bad3166832cf26b4ca
Sha384	670beb86c10248f8ce4c06a5c663ec850db50a5a2331de8af81feea20dab8cd94ff1797470c9f1484eabfdf0f6055be2
Sha512	078844327b19b56af4dd9c03a74c41010b302b6fc52dba16998aa28dc37b90fdd39d3f5f66de17424ca2143057b801a06dae2db28e6b9f5941861bb3a5ff5dba
SSDeep	96:7roP7Jv3ZlXGiZiMLYXgy7IljX5yYlq7S/mHC+VdbWeAqz0Ej7gwY01iiHn:gTBZlXd/Igy7IljJ90QmH35f5g4H
TLSH	DEB17D5AE2B38573D44186BD1C935E3483F10353DAD30B92536D29494E74A9F2B3C978

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1

bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd

Shape arc:zip>lnk>lnk:cmd

malicious 3 nodes

LNK: Command Execution UNKNWOWNmalicious

powershuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential