Deep Malware Analysis of 8ff87d296f33691d3d11b0b2aa859451 | md5: 8ff87d296f33691d3d11b0b2aa859451 | LNK | Malicious | LOLBin | T1218: System Binary Proxy Execution | LOLBin:cmd.exe | Execution: CMD in LNK | T1059.003 | T1202: Indirect Command Execution | T1204.002

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	8ff87d296f33691d3d11b0b2aa859451
Sha1	0c49e3e4f41647af17d88f01f8ffe798e0dd6357
Sha256	5689bdc0a84f245fdd7c5f71e783e07e926afe705d4082569b2c349b74060390
Sha384	f98c357b62b671fdc8fa140edf567cd7ab0f4002a4e4c8a8083a1da85ada4c7f87abd42b9635a903aa6bc8d4754baf9a
Sha512	490b1deba3c9e404a2ad1fb6380e7117b31b2becc7714eb2e0b863a8a64397c95025358724477c6768f77c3ef44feb95028eece42fa3a29039d8cbf3002cfc15
SSDeep	24:8fJ/ByUFy+/igf5emClCwawlJfj8ezjjrabZs:85YmUawzoOa9s
TLSH	793127196BA95B14E3B38F3A54ADA7118572BC12F966CF5D018495CC2828600F831F3B

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path lnk~T1059.003~T1202~T1204.002~T1218

Shape lnk

malicious 1 nodes

LNK: Command Execution UNKNWOWNmalicious

cmd.exhuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential