Deep Malware Analysis of eaa0a8a85392cddd9bb1f319199b5cf9 | md5: eaa0a8a85392cddd9bb1f319199b5cf9 | Zip Archive | LNK | Malicious | LOLBin | LOLBin:cmd.exe | Execution: CMD in LNK | T1059.003 | T1202: Indirect Command Execution | T1204.002

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	eaa0a8a85392cddd9bb1f319199b5cf9
Sha1	c6d89f860048747ac9172e4cc717767352140a63
Sha256	c0624524b704bb71548e3e64f176f569470ef1871dd7fecb21908d0ed43988fc
Sha384	135ac49f89d159a036d452c02998f9d1a4ca749b94b72c83b4ed4ce88d5c9afe5b6a9e64105d7d4ec23b569ca6e03adc
Sha512	059b0c1b8693e1e5ad7164794721c0ba14d52e63581890b14530acab7e9f00de12b46b1db266ec9d1eba8a6e7d8789f179cd2a679ea22aada8a5b182d90694a6
SSDeep	12:5jUGLsXpPLQZVFxXhkH3uwvT6iBkw5Y3P0z9gQTMC80B6Gziaoi:9DsZLQnWH3zvT6iDm0z9gQAGBZCi
TLSH	E7F0E11A8F2D8882DC0102B1378FAAAE122E3AC4881D2FD6CF69E44B1930069590A424

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path arc:zip>lnk~T1059.003~T1202~T1204.002

Shape arc:zip>lnk

malicious 2 nodes

LNK: Command Execution UNKNWOWNmalicious

cmd.exhuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential