Deep Malware Analysis of 9f8493e86bc07ce01d35052871a65258 | md5: 9f8493e86bc07ce01d35052871a65258 | Zip Archive | LNK | Malicious | LOLBin | LOLBin:powershell.exe | Execution: CMD in LNK | T1059.003 | T1202: Indirect Command Execution | T1204.002 | Execution: PowerShell in LNK | T1059.001 | PowerShell | Batch Command | PowerShell Call

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	9f8493e86bc07ce01d35052871a65258
Sha1	8ece0c6ccc6cd46919e488dc2e017308f839518c
Sha256	f9e3cf66cb732678457f1471a276c97bde63cd738c6ddc7bc9b43cce34651b82
Sha384	5dc0acc20b1e24630178d98a40ec1ee458f20a4f4a9ba90d29e26f25f971afde3c696dedbbd45d69292f1d2efa4cc69f
Sha512	3ba1ebe51fbd5554484a96bee328129cfd87ca664d56639bd89ba9a45ac92276a5b1f47b378eabd168f1ab6fc3f717ffd50e22e582ca8367f1a5d8c5f8bee2a9
SSDeep	192:UGkemVOkZQMBteHKoo0UE3VUz8fwJOsDda7tVL5vAFiokO3mmym9:UzVOaeHKoo0USOzKkOsDKVL5vxSd9
TLSH	7822AF248D38E9409DE33FF731E4E7B4A4AD92B5C504139E9A8AEF4A4501EF26177804

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1

bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd

Shape arc:zip>lnk>lnk:cmd

malicious 3 nodes

LNK: Command Execution UNKNWOWNmalicious

powershuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential