Deep Malware Analysis of 88c6c9a7fb80f65526f3c1ae197cadea | md5: 88c6c9a7fb80f65526f3c1ae197cadea | Zip Archive | LNK | Malicious | LOLBin | LOLBin:powershell.exe | Execution: CMD in LNK | T1059.003 | T1202: Indirect Command Execution | T1204.002 | Execution: PowerShell in LNK | T1059.001 | PowerShell | Batch Command | PowerShell Call

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	88c6c9a7fb80f65526f3c1ae197cadea
Sha1	969a369faccb99a207d3c07fbd4abc40ae774d62
Sha256	1eaf9dce3a1ee99c2b87a09470b0bf5088a5cadce796d37c3602766fc7255ba6
Sha384	42bbe3f5be77115c5aff4c3046ed79142d49c7b1bac912faad4b0e7c914172201c23a06fb93ac35b0715f83a8a179383
Sha512	b0dc84a0c98f4efaff03586ec98150fb7e310aa14b94dab2f171fe045d8aef6e9a8eeca41afcaff917036e13fb9e8b47a42aeb1cb554ffa510a3bb44e7a6e661
SSDeep	192:S+h5paWBZG8C8kZBgyZeBb+2rpOekJACaqlgnp9OCJOqT426imisw83aqVVGt3Vv:SoAKZGr7HZF2wekJAM+paqlswxiGDlQ4
TLSH	A252C0CB311DEEE55FB181B516E905110A1C28F3AE3DD80DC94D29F97EAA86D36024CB

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1

bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd

Shape arc:zip>lnk>lnk:cmd

malicious 3 nodes

LNK: Command Execution UNKNWOWNmalicious

powershuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential