Malicious
1291cf3a6d43df886131807bdae3b1c3
LNK File
MD5: 1291cf3a6d43df886131807bdae3b1c3
Size: 2.88 KB
application/x-ms-shortcut
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Shortcut Link File
Size
2.88 KB · 2,875 B
First seen
2026-07-31 13:03 · 2 months ago
Last seen
2026-07-31 13:03 · 2 months ago
Last analysis
2026-07-31 13:03 · 2 months ago
Hashes
MD5
1291cf3a6d43df886131807bdae3b1c3
Sha1
6bd45745cb54aca512bc3ae75f0fd2c6703a853d
Sha256
8ca6b6522c58c0b5a2070928aecd5763b2218e1c0a4d7ac5ea263990cde94fc5
Sha384
c5ff241a74c2908d7b5edb0d4a657cab34fa36f09e5c62247355f5381b8f0833b04668b1203c59009d6d450dbae9faaf
Sha512
db81be5ae01772de3e03aaf1f81c4d1c16bf2300ea9819523f5f470512935e92b13fa299a322a5e5f8c3e61418196c2d4609e60c897b69238032507ad18fec75
SSDeep
48:82SrVV85qdLXuHfab/vou2cf0THxoj5LvQX8o2H0:82SByMu/Kou2THOLvQ8o80
TLSH
AE51E6165FE902E2D2B68E73D8BEAF15957B3081AD710E4D0162021C1427BC1F4ABF27
2 malicious · 2 files
LNK1291cf3a6d43df886131807bdae3b1c3T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
lnk~T1059.003~T1202~T1204.002
Shape
lnk
malicious
1 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential2 malicious · 2 files
LNK1291cf3a6d43df886131807bdae3b1c3T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
1291cf3a6d43df886131807bdae3b1c3
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account