Deep Malware Analysis of a8de0cebe41b1e3a03b260a4974d9a59 | md5: a8de0cebe41b1e3a03b260a4974d9a59 | Zip Archive | LNK | Malicious | LOLBin | LOLBin:cmd.exe | Execution: CMD in LNK | T1059.003 | T1202: Indirect Command Execution | T1204.002

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	a8de0cebe41b1e3a03b260a4974d9a59
Sha1	22ccf9f5f738025a4a0e2f85aef453a4119928cf
Sha256	4cae81898f134c15cbf8052ee5e23d3f6f29aaf0d23e2d991c76ce7e01a312cd
Sha384	8210fcb628d978a9394d6c52fefe2053f7d7fb95475053df52867882f0777a5389a6c3b8bcd8f578476a38756d7fbada
Sha512	128cc5972d18597ac4c43a1b0445ca3feab0d8edbcd47440323937c64cc6698758bb293c98825d31d79c6d778d5e1aabb5c44147d22abf4bde3d02653dffde30
SSDeep	12:5j1MAZIoeUgp4Q5jni/8kx0UKmt2D2D4Mebaoct:9HZVHgp4Q5bi/Zx0UKmEDwRet0
TLSH	6BF020BF5EAB142CC02DACBE99A3745520141B98412A0B8A7192A0333D465EB6B1898A

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path arc:zip>lnk~T1059.003~T1202~T1204.002

Shape arc:zip>lnk

malicious 2 nodes

LNK: Command Execution UNKNWOWNmalicious

cmd.exhuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential