Deep Malware Analysis of 88565f2501520a1af172543249f91745 | md5: 88565f2501520a1af172543249f91745 | LNK | Malicious | LOLBin | T1218: System Binary Proxy Execution | LOLBin:cmd.exe | Execution: CMD in LNK | T1059.003 | T1202: Indirect Command Execution | T1204.002 | T1059.005

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	88565f2501520a1af172543249f91745
Sha1	5e84d31cb29dae0984658f2911e55796036ba6c9
Sha256	a6fff495c6b4a3b9414d31bbe1058aa204b949c36bd60f54f1f0df2f0a189635
Sha384	3f0441b29fa8c9bb5f400c7806bfc6883a4f7b6b1c285c776b6fbcb4e7deab534ba4a0f232aafde41c782bf29bb2f8d5
Sha512	5496b61acf188b0b5fc623bdfe6dd6fed3385405f518ab74fc3e15ad4723e4f34a52b4faf435d819a70199a008212723dc28348b8fdb137d1022f226503b951b
SSDeep	3072:dUMUQX3RQ8GJrXKxhCQ7STlJXbU3eBVx0iy+ixDNXwwkhjvgM0Iec8sPV8JZQgk:dU8X3a9rXKx7Il9bU3eBj1cxHOr998sZ
TLSH	0EE3122895CB578CC7B7BE163FB662C01B3AB734F97D4A4C899C1C0D4205622A736B97

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path lnk~T1059.003~T1059.005~T1202~T1204.002~T1218

Shape lnk

malicious 1 nodes

URLs in VB Code - #1 URIsuspect

https:huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #2 URIsuspect

https:huhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential