Deep Malware Analysis of f9b4fee97ad16d0999b28d66c3ddf753 | md5: f9b4fee97ad16d0999b28d66c3ddf753 | Zip Archive | LNK | Malicious | LOLBin | LOLBin:cmd.exe | Execution: CMD in LNK | T1059.003 | T1202: Indirect Command Execution | T1204.002

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	f9b4fee97ad16d0999b28d66c3ddf753
Sha1	b4d4d5e8fe5bd78b34cb1f1c5a00d43bd6b2ea71
Sha256	be5d0aebdba57a4bbc9976c7d1ef70193a6ecd3ad307fa3f26624764af2fc76f
Sha384	736e3e6ac8a96159763f374c3f54fe17fafed5a975659eb23ae4c50e98018b82e906f1d1d0dffd35888ff5a8f35985a1
Sha512	11d805de91ce5c60957b83f815de745da4c7031f3a011eec79963752c1acf25ab4ba0539df8de7549a66bcab010457efc177958b6cb7b3b7c6005db2d6046e91
SSDeep	12:5jB/0hIqHkpeAltddoCB8yv0dGmCGmrha8QA+4oWBecf/0Cao6:9pQ9EHddoC+yvLmue79iec3B6
TLSH	18F0E161A234044BEC3D84F0760B35F54FAC180599AB0F8F7A698D08B6E117A1A07953

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path arc:zip>lnk~T1059.003~T1202~T1204.002

Shape arc:zip>lnk

malicious 2 nodes

LNK: Command Execution UNKNWOWNmalicious

cmd.exhuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential