Deep Malware Analysis of b72102268518dc8820af74147ee34e9e | md5: b72102268518dc8820af74147ee34e9e | Zip Archive | LNK | Malicious | LOLBin | LOLBin:cmd.exe | Execution: CMD in LNK | T1059.003 | T1202: Indirect Command Execution | T1204.002

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	b72102268518dc8820af74147ee34e9e
Sha1	70b1cfe987dea3a81692917e642389b3787c85e5
Sha256	a35c80e2979849f84cf16bddd45d4d7143f810fd1c84d66951d17211b256b347
Sha384	db79521a22b3b14f17cc4daa6a0279ebe898a80d6841dcb83d1dac5154486ef1d744bf4412707da7597fac352b6177a8
Sha512	8a432a3fcdc7f1dff017da92d0f06f1c9e42930241968d2528c4fc54070c9370aa56c656ae2ac4bbdfac956204a31684e569fd17a79e5f68f49e48a69457cc27
SSDeep	12:5jrkkjXOnjddKWMkaOQJSFaWsbiPwq61H2b3azr8J6f82Zkk6aoN:9djYKVGaWs+Fz3avkktT6N
TLSH	4CF041F24062D81ACD35523860BBDCF4081D188B45EB8B2F3070FF100D0422C5E6F628

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path arc:zip>lnk~T1059.003~T1202~T1204.002

Shape arc:zip>lnk

malicious 2 nodes

LNK: Command Execution UNKNWOWNmalicious

cmd.exhuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential