Deep Malware Analysis of 9a006edf8bbb0eac0493badd7d065e33 | md5: 9a006edf8bbb0eac0493badd7d065e33 | Zip Archive | LNK | Malicious | LOLBin | LOLBin:powershell.exe | Execution: CMD in LNK | T1059.003 | T1202: Indirect Command Execution | T1204.002 | Execution: PowerShell in LNK | T1059.001 | PowerShell | Batch Command | PowerShell Call

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	9a006edf8bbb0eac0493badd7d065e33
Sha1	fa9703ab4304e47d7998e1ed7ab8b066d5d83238
Sha256	77d5b00de0082d4ba6b33a58a5153ac4036e4707b93c23a47c91e4e82cafed46
Sha384	e60242debb9e92fb6c6b750f9a340603435d3e71149d51eb7f6c6920025d73261e250a78fe480dafbfd639d6de7514e8
Sha512	86d1eb91820d6772e893ba1cb06b16becbc4572e8f23d072c03e5109b5521946779c6c14c07fba901fb5778893a2432b3f6337355be6de8c9ce5f784d5e4b1d0
SSDeep	384:mB3ktd+jtShFd/lDH36UYyBfafKEc3p7rl6h0eVnM:M0tCShFTDbYu73pHweeVnM
TLSH	D762D15D5D8CCE09D28D451FA29BE0644C7060817DD2F8E30B28C3CF660C9E95273536

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1

bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd

Shape arc:zip>lnk>lnk:cmd

malicious 3 nodes

LNK: Command Execution UNKNWOWNmalicious

powershuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential