Deep Malware Analysis of c22f745b6cf425bb47691fe2822e5af1 | md5: c22f745b6cf425bb47691fe2822e5af1 | Zip Archive | LNK | Malicious | LOLBin | T1218: System Binary Proxy Execution | LOLBin:cmd.exe | Execution: CMD in LNK | T1059.003 | T1202: Indirect Command Execution | T1204.002 | SOS: 0.27 | DeObfuscated | VBScript | T1059.005 | Obfuscated | T1027

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	c22f745b6cf425bb47691fe2822e5af1
Sha1	884df1e44e6ceec6d874091cf789ab83047bd694
Sha256	82b6f8b1671bfcebe13007d11ba79e06554b260b3d610b4a2a721d12f7ec3f96
Sha384	0454cdd41cc57f40c446eefa2538f523ffd494c0e48c4d1d819e671b8bd3c0cfbd32754714a6d74a2efd54c7edea772e
Sha512	1bbb33a37254805f4cc0119dcb257d515fabe60792e6fe97e4ef3c3536d759037db013cb6fc4b7b09d09424f5f66cd581979cf19731383a31350d790f5a50dd5
SSDeep	768:G9K8BaOVRLdXzXJA0BWuLPO99oaUurCgsD0HX4UaFgTWHP:G9K8BxVzraw3OIZurg0HIUmggP
TLSH	59F2D022DE9314C2CE5962FB68079519F580CB0E8A5B3DC9E74D944D0F928772FAC3A7

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path arc:zip>lnk~T1059.003~T1202~T1204.002~T1218

Shape arc:zip>lnk

malicious 2 nodes

Path arc:zip>scr:vbs~T1027~T1059.005

Shape arc:zip>scr:vbs

technique2 nodes

LNK: Command Execution UNKNWOWNmalicious

cmd.exhuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential