Deep Malware Analysis of ce57e69ffc160e08f73f3c12dd02aed5 | md5: ce57e69ffc160e08f73f3c12dd02aed5 | Zip Archive | LNK | Malicious | LOLBin | LOLBin:powershell.exe | Execution: CMD in LNK | T1059.003 | T1202: Indirect Command Execution | T1204.002 | Execution: PowerShell in LNK | T1059.001 | PowerShell | Batch Command | PowerShell Call

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	ce57e69ffc160e08f73f3c12dd02aed5
Sha1	a70146a2beaad3fcd2bd61c3430c3a488e061956
Sha256	876872c0fe3d4fc49a6b923f4f26165d6cf5ecb5c8fcf97a4e9cebf5eb31509d
Sha384	3047e72f03f6364198707b009b6aa87d86fc036e55822219211d0f6dffa890180dcaa2e8ac230671a50b9d91c5a0a066
Sha512	9670bb8d2a2637d8337a5c837e584e350649060accd2c0f66ead9db7b035568c888edc83af4bc112b21c13ed4eca01cbd9b3b8fa51376af675d5b749ce9bf19a
SSDeep	96:PryfpZ9qcl1PRzb4gWGLGCwwprDxLMv4fsPOm5yWlkzPn0:TyfHZl1ZzbHLGCtr24m5APn0
TLSH	D9A16D39A19AEF79C4761AB132E32CCB326C9753C1B6C913719085910D52CA9F7103C9

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1

bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd

Shape arc:zip>lnk>lnk:cmd

malicious 3 nodes

LNK: Command Execution UNKNWOWNmalicious

powershuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential