Deep Malware Analysis of ea4d188f4871e2f06ee561d07737ec31 | md5: ea4d188f4871e2f06ee561d07737ec31 | Zip Archive | LNK | Malicious | LOLBin | LOLBin:cmd.exe | Execution: CMD in LNK | T1059.003 | T1202: Indirect Command Execution | T1204.002

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	ea4d188f4871e2f06ee561d07737ec31
Sha1	db6f4a82bd06c7389f1d7e996ff25ae1ff82946e
Sha256	1dfffdd887449b4e40ad5c58d3f64dff1676090762a15c7ecdd3248f625cfa62
Sha384	30aa7ae7e8ce12fc1de629899f91592c3dd40fa81f18812839a7d469b8bff06e9d6a62c38365b3949418431bc5e5222c
Sha512	bac45fc91febc77c5b2ad68b1deda14c1b513ccf5faf58450f28af1095cd81ae9b328df11d55246233ffcc432ae14e4c92a5a6584516cd052d86d822b2a68a63
SSDeep	24:9iGqE7V1E9757uvsU+HxURPL4nI6QRcNGK7okUKekJC1:9RqE7n075PbHxOLf62cNGK7oTKekw1
TLSH	8411C8F1230489D3EA12D63C9C4A29804B42B06A830D731A971DD4037C10D58DF2B6C2

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path arc:zip>lnk~T1059.003~T1202~T1204.002

Shape arc:zip>lnk

malicious 2 nodes

LNK: Command Execution UNKNWOWNmalicious

cmd.exhuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential