Deep Malware Analysis of d54ca1c035df6b8abf7e8f481059e800 | md5: d54ca1c035df6b8abf7e8f481059e800 | LNK | Malicious | LOLBin | LOLBin:cmd.exe | Execution: CMD in LNK | T1059.003 | T1202: Indirect Command Execution | T1204.002 | Execution: PowerShell in LNK | T1059.001 | PowerShell | Batch Command | PowerShell Call | T1027 | DeObfuscated

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	d54ca1c035df6b8abf7e8f481059e800
Sha1	aa8092ca625ac707b01daaaf521c18a6810baa35
Sha256	36b86fc4dbfabc7de28b5e0293f378b72dbb2b5b5d25351c6ff125bc46e7079a
Sha384	36e3aa7a308cfc56d87f7472574a4b2aab31f02be5fee9a662ff2039a98de74816e2eabf8e8f91668e2f5eed5c16c15f
Sha512	cc1938c29c2116452794b4720e5f4392ed87e567d90aa8e2169ecc02b9aaf05fa6afbb7e38f51eb84286e63bebf30adc42e8f27b860ef2b4e51c78d817cc9749
SSDeep	6:4xtiU5Yzqyzqy/0hkKlFcnlj+SEEgykQLPfBMlpIZe6SaU/k1ARokJxt:8oU19kCikQLhMb2eMf8
TLSH	6511C2251FEF0A00E2F65A34ECB8966129307C0C8A31065D0380182C4CE2A18DC36F32

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd>scr:ps1~T1027~T1059.001

Shape lnk>lnk:cmd>scr:ps1

malicious 3 nodes

Path lnk~T1059.001~T1059.003~T1202~T1204.002>scr:ps1~T1027~T1059.001

Shape lnk>scr:ps1

malicious 2 nodes

LNK: Command Execution UNKNWOWNmalicious

cmd.exhuhuhuhuhuhuhuhuhuhuhu

Deobfuscated PowerShell UNKNWOWNmalicious

"iex(ihuhuhuhuhuhuhuhuhuhuhu

Deobfuscated PowerShell UNKNWOWNmalicious

Invokehuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential