Deep Malware Analysis of b8363c782799dacf92b8e62479889802 | md5: b8363c782799dacf92b8e62479889802 | Zip Archive | LNK | Malicious | LOLBin | LOLBin:cmd.exe | Execution: CMD in LNK | T1059.003 | T1202: Indirect Command Execution | T1204.002

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	b8363c782799dacf92b8e62479889802
Sha1	246c67c1920e42a2c035f0a6d01ca11eb4468440
Sha256	56bd82a2f6695129e68d10390d5356d4c6c675b0bc3d4c0311699a35e593dba6
Sha384	1b949fcd52565b46138527863079e86f342b5c413d9cf9837ab074f2e157c98eeb0b99be69f853e6982abdc3ceafd8bb
Sha512	cdd7b49669134230e677017bc9247dd359b12be1f3a27022f30e2e4ca26dc159fd80c01a9dab7bdd7cbfbdf7a15c720f900c5694d3900d400651a228f485c39a
SSDeep	12:5jlgzAC9x+lbyfJ98/2i/6jCQR3qbkB0GyP/fKiaov:9gdnjfJ98r/6jCyYG0rv
TLSH	21F0418F27810820DC20D97B3217764569D29250814EB64801A5FC0324AC1CB0B3CA68

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path arc:zip>lnk~T1059.003~T1202~T1204.002

Shape arc:zip>lnk

malicious 2 nodes

LNK: Command Execution UNKNWOWNmalicious

cmd.exhuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential