0dd946c9d4f5727c765526420d194425

LNK File

MD5: 0dd946c9d4f5727c765526420d194425

Size: 1.43 KB

application/x-ms-shortcut

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

MD5	0dd946c9d4f5727c765526420d194425
Sha1	32d427420a47f3ad032f088f26f3c3d6bc33efca
Sha256	9d5dae158e928f5c8c49d92a462d932a7e39f7c76510ab11b666e4e2d5783ca0
Sha384	d9dc8021185b6da45c6673f1384e4ccffa764bd4aac05348d0a8c54adbcb3cea077ca3e6046e8f042ed49735dfe7c6d6
Sha512	b975d21f69bcb7dc5fcc4051dc0b3b3601ed572096d7ecaa455f541e541e629847c451e553d16688a3c505bf789062dd895fd4df0c5163acb499ad93414b90a6
SSDeep	24:8A/BwKcMb+/eMgXIJUoLeDhiW8qzJ0zfMxsv7lgW8AW/hIu:8E+dMtXcFaEW8qazfxeW8AW
TLSH	AC212C1476FA5714F2F39EB944BAF11189767867DDA6DB4D0008818E2935A00FD33F22

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path lnk~T1027~T1059.001~T1204.002>lnk:cmd~T1027~T1059.001>scr:ps1~T1027~T1059.001

Shape lnk>lnk:cmd>scr:ps1

malicious 3 nodes

Path lnk~T1027~T1059.001~T1204.002>scr:ps1~T1059.001

Shape lnk>scr:ps1

malicious 2 nodes

Deobfuscated PowerShell UNKNWOWNmalicious

-appvshuhuhuhuhuhuhuhuhuhuhu

Deobfuscated PowerShell UNKNWOWNmalicious

tree huhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential

No malware configuration was found at this point.

Deobfuscated PowerShell UNKNWOWNmalicious

-appvshuhuhuhuhuhuhuhuhuhuhu

0dd946c9d4f5727c765526420d194425 › LNK CommandLine

Deobfuscated PowerShell UNKNWOWNmalicious

tree huhuhuhuhuhuhuhuhuhuhu

0dd946c9d4f5727c765526420d194425 › LNK CommandLine › [PowerShell Command]

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential

You must be signed in to view YARA rules.