Deep Malware Analysis of d2e89641aab3f2c1790dcad746aa67b8 | md5: d2e89641aab3f2c1790dcad746aa67b8 | LNK | Malicious | LOLBin | LOLBin:powershell.exe | Execution: CMD in LNK | T1059.003 | T1202: Indirect Command Execution | T1204.002 | Execution: PowerShell in LNK | T1059.001 | PowerShell | Batch Command | PowerShell Call

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	d2e89641aab3f2c1790dcad746aa67b8
Sha1	12e00daafe8d30219d044659c4368f5a2bda56bc
Sha256	3764f4b259a72b12422956f553eba62edc7a0b21cf628e839d24150e701e0a69
Sha384	13a2972ff44f9465f5d65caf207befd52ad6637ff7da6532e05bf51ea031d680ad074ca40be92d6b315a3bfe68e075ae
Sha512	eecc3df4f79690f1e3551e0531729b0fc546659c17f3528cd2930a15d602d4bfa3ccdca682f844003c0084d2570f88adf82d78dc974ba81e01e0a842dd77798d
SSDeep	24:8hNE14mXlOFCHHVXn6cFOxwy5bi4o0wM/8CWT4o0:8hNYO+HVnNsxHhoGo
TLSH	115149295FE40725FAFA4F76E4FDA20274327E3AA801D95D4181D18C84B2609E4F6B3B

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd

Shape lnk>lnk:cmd

malicious 2 nodes

LNK: Command Execution UNKNWOWNmalicious

powershuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential