Deep Malware Analysis of f955f9bd69676304965d67cd0e21c7e0 | md5: f955f9bd69676304965d67cd0e21c7e0 | Zip Archive | LNK | Malicious | LOLBin | T1218: System Binary Proxy Execution | LOLBin:cmd.exe | Execution: CMD in LNK | T1059.003 | T1202: Indirect Command Execution | T1204.002

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	f955f9bd69676304965d67cd0e21c7e0
Sha1	56876767b3c47d5b251b5e03ad4a538043ed7e7c
Sha256	43a5fbead56ffab9262bcb1c400dc2079028c2e4cf76a5ddc1c96bc779eb0dab
Sha384	6100de2ed7a3789d5a98ca5944bcc09af91eed95abf3af933753187d383f5fda687b153692fdc1fb5baa8542fb0057b5
Sha512	ea51409b0bcbbdbd493d2a603dc9d82ce14b6592b4d0514137b082e4ec5e5927b6a55ab83e4c57720d56632564908b667cd5e8a3462246d2d771497ab997c6a1
SSDeep	24:9EKhW2y6nMJawuBwOT2T5uJelS1JS+TWtR:9Lny8BS0kluJS+TC
TLSH	3111945E8C986C19DA26B8759029D0B5C9345D1438BE0CFF13488D5987BDBF1BF38B04

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path arc:zip>lnk~T1059.003~T1202~T1204.002~T1218

Shape arc:zip>lnk

malicious 2 nodes

LNK: Command Execution UNKNWOWNmalicious

cmd.exhuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential