Deep Malware Analysis of dc4d962b312a55162ff130e222b9ab1f | md5: dc4d962b312a55162ff130e222b9ab1f | Zip Archive | LNK | Malicious | LOLBin | LOLBin:powershell.exe | Execution: CMD in LNK | T1059.003 | T1202: Indirect Command Execution | T1204.002 | Execution: PowerShell in LNK | T1059.001 | PowerShell | Batch Command | PowerShell Call

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	dc4d962b312a55162ff130e222b9ab1f
Sha1	4840f5f2d98c91c7288a8be4c2876ab7d9fbfc73
Sha256	4a0c77e8d240cebd1d8bbabd14f8a815d35d561cc037f94d9c3acb9da21c41e3
Sha384	654d18ade0d49959a30c18a9a7d17b86d99c6b7d44051680b69bf0187da7f1fd8ab592878fc5ab09db074cca41026629
Sha512	36645e227a8c1b987bee4bd66bf1cf51be6d85aada055c8c37546fe27a4f40af4b2b3dd42bbb09457308a0ca8eba1f72d8e0afa40838ffb86be108cf8d843da0
SSDeep	192:puSUpExoTlUReiW47X8Lv4n+Ec/Rty21f8UYKCWvrh8YMtQ0ttT5r+:pulpz+hr8LvZRUUYnCAp+
TLSH	0B42B020EF47F931E6E5457104F6786CBA0593B6DD82EA5E8167560CE3B04FB15CA83C

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1

bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd

Shape arc:zip>lnk>lnk:cmd

malicious 3 nodes

LNK: Command Execution UNKNWOWNmalicious

powershuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential