Deep Malware Analysis of fef729febbc31a14b759eaded3e08c6e | md5: fef729febbc31a14b759eaded3e08c6e | Zip Archive | LNK | Malicious | LOLBin | LOLBin:powershell.exe | Execution: CMD in LNK | T1059.003 | T1202: Indirect Command Execution | T1204.002 | Execution: PowerShell in LNK | T1059.001 | PowerShell | Batch Command | PowerShell Call

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	fef729febbc31a14b759eaded3e08c6e
Sha1	59436823ed4005fbd79b6e98b48ac6213285c9ba
Sha256	33a3959a846fd4563b7225b740dd5080863e7c90fb6ee6ddac8deb23bac867d9
Sha384	c1c7b6f9a44ec3d82a8859fa37d2e30d289c5620720d4e7c8e044beb6c3f76a894ac7caa8ad21dae1d78006c876be515
Sha512	fef909afbcb8a45419c89f10656f0e39821873e98b1f3df6929deeebc3ff20e33ac0a05689e2707a1a40fb53aaa1bc6baf2c0d1fd42e9871505eeb357c2bcc58
SSDeep	96:mx7i7qu3QvzrxfdCUJ6HvjPxknuVJCWEg/E5LJ6U:OvzNFCW6HvjxGwotKU
TLSH	92815CCCE4490611F0E8ED752DCD1B6CA14999923AF3033355BB5BECE9216A48F2B0E1

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1

bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd

Shape arc:zip>lnk>lnk:cmd

malicious 3 nodes

LNK: Command Execution UNKNWOWNmalicious

powershuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential