Deep Malware Analysis of d1d1bccd424cf2ea93c61d51ea29b3ff | md5: d1d1bccd424cf2ea93c61d51ea29b3ff | LNK | Malicious | LOLBin | T1218: System Binary Proxy Execution | LOLBin:cmd.exe | Execution: CMD in LNK | T1059.003 | T1202: Indirect Command Execution | T1204.002

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	d1d1bccd424cf2ea93c61d51ea29b3ff
Sha1	04c1708ffdb9c0903d4f8dc248ac97141f758b63
Sha256	c8e08fc2e04eddce3ed79519f8e606b0906a46650164698cb5cc7caddea0390e
Sha384	654454d2d792e36044838fe5f0a1754355ea1187c6d38209a9ab61e94ac4671e4524bbcc4f02db0e003ca406d4f7601e
Sha512	0109d535efe9f7608b0c0dacf6aa78b019939fb76008a511d63bbafac282778a49f8df300891a7ba9e0622f198aaa7f91b96b722208b5e622e58e5c078f8391f
SSDeep	24:8C97Ri5oAcBb7gkv3l5nD99HbMf0e0VF+4J9I2:8C985d+bt3TDvHYf50VrJW2
TLSH	40413A8439E91210E3BA9A38CB7D4341862B74496D32C14C0A6CD61D4B17B53D7B7B17

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path lnk~T1059.003~T1202~T1204.002~T1218

Shape lnk

malicious 1 nodes

LNK: Command Execution UNKNWOWNmalicious

cmd.exhuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential