Deep Malware Analysis of da058716188ed6bf6605ed6747deb8fe | md5: da058716188ed6bf6605ed6747deb8fe | Zip Archive | LNK | Malicious | LOLBin | LOLBin:powershell.exe | Execution: CMD in LNK | T1059.003 | T1202: Indirect Command Execution | T1204.002 | Execution: PowerShell in LNK | T1059.001 | PowerShell | Batch Command | PowerShell Call

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	da058716188ed6bf6605ed6747deb8fe
Sha1	d3b5f88a0a92cca0e35c8c5ae435bcb11eb51f70
Sha256	33355e4d51ecb4d2eb03f68f27d0a43feb08749851a089ebee12c29fb4227251
Sha384	f9b18700c2bffd9298abfa3e5809e13d3278b48270d999f75bda090d699aa4952ee30456f20f8b708bf6c80040f8c36b
Sha512	a042f62ccc2f3c75e62ce7fbd024f6039f133215b34e6a99d6d2283330beb1859cffa1b919306e7085a263a32cefea72a110f006869bc4bf556d4745e1cf3858
SSDeep	96:WhV8Go1U+FjshNhpZtaFGZI3WXnkRCZ2iOAWnaHtgZjDGO435X1U5GBi6qJpu3GM:lRljezFsGyKnkcEiLHtgZjDGH35ljix4
TLSH	0CC18FC45F778B22D6EB67BAD421320948AD0B1550E7A7433E1AE10DEE16F2256FD890

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1

bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd

Shape arc:zip>lnk>lnk:cmd

malicious 3 nodes

LNK: Command Execution UNKNWOWNmalicious

powershuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential