Deep Malware Analysis of 972705daee5f7f04c1aa23fdb414fcaf | md5: 972705daee5f7f04c1aa23fdb414fcaf | Zip Archive | LNK | Malicious | LOLBin | LOLBin:cmd.exe | Execution: CMD in LNK | T1059.003 | T1202: Indirect Command Execution | T1204.002

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	972705daee5f7f04c1aa23fdb414fcaf
Sha1	e348cef7fbf71a14658681680c9b6471112eb76d
Sha256	2bcae4598825b9adb9ae2d2e9a1056a80238cbc5d8d15e581b7511abf011593a
Sha384	43cfbf500f3b5580be1c0f9b4e572c37682d33e9db5dec878f11af41113ea8ca8ca6a33dc8af25d6a8adf821dfa16df3
Sha512	c5aca21644f06e9be44d7fa6d4b5ac4bb878e2b150ea08466175b03d73593aebe1114d6d7ce77095df3f6e3bbd00dd4e1dec5e3467a250b2364ad97fc8eff056
SSDeep	12:5jCKNamqmWhms5UvQ6tlbZMbeD/bkzuMNiiiCYKE7+aWmd1FaGvTBHKN6aoO:9CvfmWhB6vGg/bkjYKTc6uBHvO
TLSH	5EF0021045BA4046D49C46BD642573E2D26816E082B72F43213CD6841D142A39B9B559

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path arc:zip>lnk~T1059.003~T1202~T1204.002

Shape arc:zip>lnk

malicious 2 nodes

LNK: Command Execution UNKNWOWNmalicious

cmd.exhuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential