Deep Malware Analysis of e2664f4ff5719cc31325c8cb03575e91 | md5: e2664f4ff5719cc31325c8cb03575e91 | Zip Archive | LNK | Malicious | LOLBin | LOLBin:powershell.exe | Execution: CMD in LNK | T1059.003 | T1202: Indirect Command Execution | T1204.002 | Execution: PowerShell in LNK | T1059.001 | PowerShell | Batch Command | PowerShell Call

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	e2664f4ff5719cc31325c8cb03575e91
Sha1	67b7444959bd7fb007832db6ce432ff40001d734
Sha256	1e8426200fb771992a460af1d715fdfeaaf3dab76e76292cead379f5261cae0f
Sha384	bbaec8fa232cce80d7e9ca35b8d73dca68aef9a1367b39ef3c1f02d53bc9d0db58831620355266974484bc2c0f1ef46d
Sha512	ab7149ffe89bd360dccbb949ecd78bcc5db2707f1bcb89a0a254b9af5d55b945e4247ff37a6e5f08455f9e0e6b64ff2f2ec0aa2c245a6972109df282d2f54cde
SSDeep	24:9ODZcB2pyllkFxX5H3ulqTitvcZBxVoHAw7c1qZI3ATP5wKBpcj1dQBjYp4FevrM:9OFLgXMH+lqetvcZBxVoHFA1sKATeKBF
TLSH	1531E90244474884C23E99FEA7FA895C2865B0F0112EA49DF406B2197D02BF5017E9C5

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1

bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd

Shape arc:zip>lnk>lnk:cmd

malicious 3 nodes

LNK: Command Execution UNKNWOWNmalicious

powershuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential