Deep Malware Analysis of ebbc6b538ecb77db52b94e4b57059cc0 | md5: ebbc6b538ecb77db52b94e4b57059cc0 | LNK | Malicious | LOLBin | T1218: System Binary Proxy Execution | LOLBin:powershell.exe | Execution: CMD in LNK | T1059.003 | T1202: Indirect Command Execution | T1204.002 | Execution: PowerShell in LNK | T1059.001 | PowerShell | Batch Command | PowerShell Call | T1027 | DeObfuscated

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	ebbc6b538ecb77db52b94e4b57059cc0
Sha1	b251dd00e64e5ebd5ceaee6dcddd6b0631a1fc74
Sha256	cc15aee9a90b096fda07c9f5f46a9191c756371c435f1ce57f561db22b5aabc1
Sha384	5e7b9107bd5d4ec6f1215ae43b02598694d85bef11897eebd0315d5402d64cc8e1a00188ff88fb3b248df764920d8bee
Sha512	a6e25fea2bff31c8b4c38f54ddbaa4900c90f5b114ccd0fd84fcfdea7719df7be70b3bc044bd2cecd3cefba83644db45d7a0a0fed4a319c66757cbbc9d047154
SSDeep	96:8LCmBQVuyG1QyjVGyaMBQVuj1jQ2GQR2GyaMBQVuyFgGWzjyaxSBQ5vfUJZ1AzFH:83BQVuyG1QyjVGytBQVuj1jQ2GQR2Gym
TLSH	D4C124901EDF10CDE2364FB103CAB5BE0796E4B0CE5E6DB012C14A2156F7D86E939BA4

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path lnk~T1059.001~T1059.003~T1202~T1204.002~T1218>lnk:cmd

Shape lnk>lnk:cmd

malicious 2 nodes

Path lnk~T1059.001~T1059.003~T1202~T1204.002~T1218>scr:ps1~T1027~T1059.001

Shape lnk>scr:ps1

malicious 2 nodes