Deep Malware Analysis of e88983f0e6d20c18c5adccd24af03cfa | md5: e88983f0e6d20c18c5adccd24af03cfa | Zip Archive | LNK | Malicious | LOLBin | LOLBin:powershell.exe | Execution: CMD in LNK | T1059.003 | T1202: Indirect Command Execution | T1204.002 | Execution: PowerShell in LNK | T1059.001 | PowerShell | Batch Command | PowerShell Call

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	e88983f0e6d20c18c5adccd24af03cfa
Sha1	c21c10a8b94870a8a508cf27b1fb2c21fbe2e3f2
Sha256	e340f98e6d1097fbf583bcc3776580414e2761a3ab71b6666c76c6afe936d8bd
Sha384	bd7e982933d1382c31907e742b8cc6c39adb2266415254a70825400397e9a23256f231678f46fc939bc0258bea2475bc
Sha512	3f186a13699b972e7ba83d53eb9157e41dc78ab4a3b3ad6599300ed663556bc2f37298a27fc46768eec542e049ab334e76b6b1004e4118c3bb5ab3938b59b9a0
SSDeep	384:jwM96R0RkAYislAs3MP6FwIjeWWKhlKJNMvNJzg:jwEa0S4QT3MP6FwIjeJKnIKvg
TLSH	A362D08AC4F7030ECE30A8FF01B1249E924A0C22CE67E97AEA344D194474DA313CB8CD

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1

bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd

Shape arc:zip>lnk>lnk:cmd

malicious 3 nodes

LNK: Command Execution UNKNWOWNmalicious

powershuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential