Deep Malware Analysis of e78d3ab5cd893d4b70bb7d44257b7aef | md5: e78d3ab5cd893d4b70bb7d44257b7aef | VHDX Disc Image | Executable | PE (Portable Executable) | PE File Layout | PDB Path | LNK | Malicious | LOLBin | T1218: System Binary Proxy Execution | LOLBin:cmd.exe | Execution: CMD in LNK | T1059.003 | T1202: Indirect Command Execution | T1204.002

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	e78d3ab5cd893d4b70bb7d44257b7aef
Sha1	5bbc355a48fe0688c08068f5e775174c52cae7ab
Sha256	247b3244ccbb8e33ebba0d3aa66a38f66cfe7d27d91fb299927628249532d10e
Sha384	8e4058501d6cb44dcbca2f6573b15a150005f144f65819bbb647b8a23e5f6443cb7244e9630288ba66864b189448bdd6
Sha512	09769ec6251a17b688fad82a90780d7877395371e4f295e30e905b22a40a6f726f68edf52133752f44281764ed2b1663b9d2e1e6778a5ee9b147979735f06316
SSDeep	6144:iXXK3jQoHr3VF2mjkaRGP4PkhijsKgW3UMKYMKBbZixslfKPCoDgmX/oBS7ENNUB:MKEoJF2mjkabsKgW3/myiPCgSTO
TLSH	E976D50232F824E5F077823995725612E3B2BC69972193DF16A4492D6F73FD06E387B2

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 5 STICH kept: 1secondary ignored: 4

bin 4

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path img:disk>lnk~T1059.003~T1202~T1204.002~T1218

Shape img:disk>lnk

malicious 2 nodes

Name	Value
VHDX	DiskImage extraction mode: DiscUtils (VHDX)

LNK: Command Execution UNKNWOWNmalicious

cmd.exhuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential