Deep Malware Analysis of a6034049495118c6dca9c41f5df4a9a9 | md5: a6034049495118c6dca9c41f5df4a9a9 | Zip Archive | LNK | Malicious | LOLBin | LOLBin:powershell.exe | Execution: CMD in LNK | T1059.003 | T1202: Indirect Command Execution | T1204.002 | Execution: PowerShell in LNK | T1059.001 | PowerShell | Batch Command | PowerShell Call

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	a6034049495118c6dca9c41f5df4a9a9
Sha1	12d0a028fbd01c592bf0817185652aaf43c4f814
Sha256	9840473dbee7c23965f4ee355af4eb0569a162e25a8c2a25b54864ddf1e4b42f
Sha384	b50473125fefb4d7d1ce30b42ed9bd45d4d6257ed9c433e6f67b53975a805cb960aa88e5369624deae1a33b860609cec
Sha512	925beabdc372914c598bf47f27b305457e0647b9d574f7a3f320b7c4c6a564f596c419198159e7e94f57781a5aa22b93db0d96efba111cb17742341c1b3efb56
SSDeep	384:YuBoLl+UWbGdtGEQgCc5h98tKVylB5eQfz9dNcK:gLsUWadRQMzkHluC+K
TLSH	B472C080ED58360DA80753E07C10DFBE67138A6913395BFBE51D37916236229E183B99

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1

bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd

Shape arc:zip>lnk>lnk:cmd

malicious 3 nodes

LNK: Command Execution UNKNWOWNmalicious

powershuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential