Deep Malware Analysis of form_c.docx.lnk | md5: c6e83e996cfc2e881c9c8c2c40209a0b | LNK | Malicious | LOLBin | LOLBin:cmd.exe | Execution: CMD in LNK | T1059.003 | T1202: Indirect Command Execution | T1204.002

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	c6e83e996cfc2e881c9c8c2c40209a0b
Sha1	6ad7b22552a385ae96a89e0bc40b6f84bde63d03
Sha256	100b763a5a440b643948073af709647c348b6543efd7d174918047629846474e
Sha384	511fe93d448683109e3bade822d64f0a8c8b413b595256a84660574cb7ff4d579dcb8b084277ef4e9f8961533b4cef68
Sha512	e0256af65330e8d731bfc82c29c8058acf85f0fca660459fddb64b8a731c630b912f44aa05112e1c9de19668e5ba3f4a266452cb0009d9da12ea003660d51b30
SSDeep	24:8d/+xlPn6ltlnqRyaWInZU8lvAlrg8kwSp+UOi+Eu+njVHqUDM2:8l+xl6TYganUlNpy7KEu+njt1D
TLSH	7E73BB3431ED0118F1F3EE307EE0B7D5EE6AB273A876125E4891020A0912A54FE19B3B

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path lnk~T1059.003~T1202~T1204.002

Shape lnk

malicious 1 nodes

LNK: Command Execution UNKNWOWNmalicious

cmd.exhuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential