Deep Malware Analysis of e5fc0547a1a8802d3196abd82c35ff6c | md5: e5fc0547a1a8802d3196abd82c35ff6c | LNK | Malicious | LOLBin | LOLBin:powershell.exe | Execution: CMD in LNK | T1059.003 | T1202: Indirect Command Execution | T1204.002 | Execution: PowerShell in LNK | T1059.001 | PowerShell | Batch Command | PowerShell Call

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	e5fc0547a1a8802d3196abd82c35ff6c
Sha1	59828c00d5f8cd488184d85c4ef17aaca0830c3f
Sha256	cee5f4234344c49796812e11c5b14c68089c09ee1c772e71ff1cc296a26925ca
Sha384	ad350606696a84265d4a963d214a6ed3de9eeb60ec8e2dfc52f1e74696f38239db759bacf1829e94785eb9139a16dffb
Sha512	8b06ddaca0ba8224999a3269ae5d809debcc982509e313564cb700cae94e2d008366e463863f06a975779249a35f38b00e929847232acd81a3cb73972c9a0a90
SSDeep	24:8E/BHYVKVWf+/CW55irVueUMkW+wlRgUoIbPOF3+/QT4I02YhX:8A5acoueHGwlRgBIbPOF3fMI
TLSH	77410A146AE60714E2B3CB3D6CBAF21189767C46EE51CFDD019191885424614F975F3F

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd

Shape lnk>lnk:cmd

malicious 2 nodes

LNK: Command Execution UNKNWOWNmalicious

powershuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential