Deep Malware Analysis of a9017267422ee882d54236a8c7d022b8 | md5: a9017267422ee882d54236a8c7d022b8 | Zip Archive | LNK | Malicious | LOLBin | LOLBin:cmd.exe | Execution: CMD in LNK | T1059.003 | T1202: Indirect Command Execution | T1204.002

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	a9017267422ee882d54236a8c7d022b8
Sha1	052d1c566c76d79fb5b64a3397ccf92796960a0e
Sha256	f7f26648325d4ba850769c52bcdde604ff122783e1e48eae16346f84748e0809
Sha384	48e433b86204b9917944eaf7fc9463e755bb2ed48bb86790fd567d5642c5dcd9bf6e990eb1e0e210bef5fdfa2bc5d45b
Sha512	a0c37777454ab00eca5545ca2fb35b4982b1e79497c98dbb44d8eea10131a0ac049332bb1b4967ff9476ab2e74f2d4a6a89d6731fee0b706189a18a9b6ab9264
SSDeep	24:9TDPmpRGrBU/s7b/URMXg7qvLxc6kpVBVw:9TURGrBgs7b/URUgG6/VBVw
TLSH	AE11B742309361A7C03B127021301E2112685A58349E8427E6B475D9EE339B047C2FB9

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path arc:zip>lnk~T1059.003~T1202~T1204.002

Shape arc:zip>lnk

malicious 2 nodes

LNK: Command Execution UNKNWOWNmalicious

cmd.exhuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential