Deep Malware Analysis of e7d14a301bef41d36f7de8b0a7fe523e | md5: e7d14a301bef41d36f7de8b0a7fe523e | LNK | Malicious | LOLBin | LOLBin:cmd.exe | Execution: CMD in LNK | T1059.003 | T1202: Indirect Command Execution | T1204.002 | Execution: PowerShell in LNK | T1059.001 | PowerShell | Batch Command | PowerShell Call | T1027 | DeObfuscated

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	e7d14a301bef41d36f7de8b0a7fe523e
Sha1	19b1ec1802e3b2324eba7add6898026c99085699
Sha256	e0cbbb0d0b53509ccae1da6ea6f1b084c20d72e8723b98bb2aa5cced01f7b414
Sha384	7a7e69d3e8f0e12f19050523038dbc88b1f74934e730ede648a3ffa0b5a10f218ffcf761f7b09135d742dce21822c4f2
Sha512	6e11c7c670130ddd725432aefae263f7350a7fd32ff595d2a21e2204893152cd8430fd6e4aec154a67d5c10a8b093ecadf3f0b3b7a20d585ebc62a019d0d46dc
SSDeep	6:4xti9X3X3/lKolHKlFcnlj+SEEgykQLPfBMlpIoF6SaU/k1ARokJxt:8ol04QkCikQLhMbHFMf8
TLSH	0911C2251BCA4E00E2F5AB34BC38960119A87C6C8D314A8D0286195C0C26A209A75F36

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd>scr:ps1~T1027~T1059.001

Shape lnk>lnk:cmd>scr:ps1

malicious 3 nodes

Path lnk~T1059.001~T1059.003~T1202~T1204.002>scr:ps1~T1027~T1059.001

Shape lnk>scr:ps1

malicious 2 nodes

LNK: Command Execution UNKNWOWNmalicious

cmd.exhuhuhuhuhuhuhuhuhuhuhu

Deobfuscated PowerShell UNKNWOWNmalicious

"iex(ihuhuhuhuhuhuhuhuhuhuhu

Deobfuscated PowerShell UNKNWOWNmalicious

Invokehuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential