Deep Malware Analysis of afd3306af0168902d350d1ab2a139ab5 | md5: afd3306af0168902d350d1ab2a139ab5 | LNK | Malicious | LOLBin | T1218: System Binary Proxy Execution | LOLBin:cmd.exe | Execution: CMD in LNK | T1059.003 | T1202: Indirect Command Execution | T1204.002

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	afd3306af0168902d350d1ab2a139ab5
Sha1	9e35241423187d22db58d839d435c705c00ad016
Sha256	a286de012954013e57dca6fe2d110c732576aea9b75c72d8a149cd5f6332ef6a
Sha384	13d3bdb344f219145e4603b98e5db10df73407e5f308f6f62bdd62b81dea30e7dd68af1c1d12bd681c69547d9364226b
Sha512	959b2ad3d230b7a3117ae49a8d3ebe3c6a9f9493e9b492cabd3951dc82c536d08f7930435b2c78b3c6ca8378dda4e9dc8d242bb457c2bcd3e3e32db0da43fb16
SSDeep	48:8WwmPaIW5FPAtRKTY1geNy1TGJbaq1TXX0JIWx:8hNbz+Rum1yyPTXkJ
TLSH	AF51760039A94205F2B63D3ADCF2F352496AB921EC31F6B54C60818C256058BDB3BF33

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path lnk~T1059.003~T1202~T1204.002~T1218

Shape lnk

malicious 1 nodes

LNK: Command Execution UNKNWOWNmalicious

cmd.exhuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential