Malicious
LNK File
MD5: 0dd946c9d4f5727c765526420d194425
Size: 1.43 KB
application/x-ms-shortcut
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
| MD5 | 0dd946c9d4f5727c765526420d194425 |
| Sha1 | 32d427420a47f3ad032f088f26f3c3d6bc33efca |
| Sha256 | 9d5dae158e928f5c8c49d92a462d932a7e39f7c76510ab11b666e4e2d5783ca0 |
| Sha384 | d9dc8021185b6da45c6673f1384e4ccffa764bd4aac05348d0a8c54adbcb3cea077ca3e6046e8f042ed49735dfe7c6d6 |
| Sha512 | b975d21f69bcb7dc5fcc4051dc0b3b3601ed572096d7ecaa455f541e541e629847c451e553d16688a3c505bf789062dd895fd4df0c5163acb499ad93414b90a6 |
| SSDeep | 24:8A/BwKcMb+/eMgXIJUoLeDhiW8qzJ0zfMxsv7lgW8AW/hIu:8E+dMtXcFaEW8qazfxeW8AW |
| TLSH | AC212C1476FA5714F2F39EB944BAF11189767867DDA6DB4D0008818E2935A00FD33F22 |
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
lnk~T1027~T1059.001~T1204.002>lnk:cmd~T1027~T1059.001>scr:ps1~T1027~T1059.001
Shape
lnk>lnk:cmd>scr:ps1
malicious
3 nodes
Path
lnk~T1027~T1059.001~T1204.002>scr:ps1~T1059.001
Shape
lnk>scr:ps1
malicious
2 nodes
Deobfuscated PowerShell
UNKNWOWNmalicious
-appvshuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell
UNKNWOWNmalicious
tree
huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential