Deep Malware Analysis of 9723ffa34a5c777db35a12cfe2bcc8aa | md5: 9723ffa34a5c777db35a12cfe2bcc8aa | Zip Archive | LNK | Malicious | LOLBin | LOLBin:cmd.exe | Execution: CMD in LNK | T1059.003 | T1202: Indirect Command Execution | T1204.002

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	9723ffa34a5c777db35a12cfe2bcc8aa
Sha1	bfea22793b950e61ef88b3d4cf62149ad39505dc
Sha256	ed88f7ba23c86d6de8d0e539109c9f2af8eca809348def5a2fa05797ff643754
Sha384	c6abfd0e928053133c0ee385585084d8f43f5d90dbe97882a0cd3ceefac847a21863f72fc9c31f28013f08f1b2ee27ae
Sha512	76f85cac9e5e417e7afcf62e94a72fec2a3c7c94bf67df5578c2ad7a0c9256071257bb3416713f8cfcdee6c9843b2894b3629a1c23b2c22538cf67a893d80ba1
SSDeep	24:9BYBNiMJ0Zpc5KKYvR5fyE1mgnBGIbY6ACb:9BYLp0XGP6DyEAEVxFb
TLSH	3811675D95F07060CAD1D475E5738A99183E214DD4F664EEA81CFD0500B85A3EFD711D

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path arc:zip>lnk~T1059.003~T1202~T1204.002

Shape arc:zip>lnk

malicious 2 nodes

LNK: Command Execution UNKNWOWNmalicious

cmd.exhuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential