Deep Malware Analysis of 98f0107f26a45ac5f57b512943019536 | md5: 98f0107f26a45ac5f57b512943019536 | Zip Archive | LNK | Malicious | LOLBin | LOLBin:cmd.exe | Execution: CMD in LNK | T1059.003 | T1202: Indirect Command Execution | T1204.002

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	98f0107f26a45ac5f57b512943019536
Sha1	11bdf1e64e8bb78329156895d48fa6231b93cb41
Sha256	95e5bf98d286f08191918434a2e501313cfed5d07366952ee0da8cd2f45d1378
Sha384	2d7d7c66619753d7cc05d0348bc3181c3e28fc2a5e332559919293f01529c4ece443ba2fcf42bd3007f71814b6317e82
Sha512	7cd0100b8bce0a9c4bb92e452d932daca92c8bd37c2c9762d053a5a830254b6532e901b125c187854c0de70f3f1b6a16662e9b16b19f0ece4df5cd7689214c18
SSDeep	24:98lwNqVaLJU/E31+6lhGh8esc7401+HTOQr2ASFyldIYl:9PEwLJj1VTGh8ecg+zLHGYIYl
TLSH	8611B37E7146D801C382CDB65635B0CA9FD001A040E2A93D2881E802721FCECB97A850

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path arc:zip>lnk~T1059.003~T1202~T1204.002

Shape arc:zip>lnk

malicious 2 nodes

LNK: Command Execution UNKNWOWNmalicious

cmd.exhuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential