Malicious
18c60bc9dd783b5ed3d86c248a60dcb3
LNK File
MD5: 18c60bc9dd783b5ed3d86c248a60dcb3
Size: 1.97 KB
application/x-ms-shortcut
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
| MD5 | 18c60bc9dd783b5ed3d86c248a60dcb3 |
| Sha1 | a9be70799072dc4fb3e54ed5e510eed338249e8e |
| Sha256 | 324e612220df1f9786420e288b92abcc04cea9bb4166ef033228d977e34412fd |
| Sha384 | 30fd822dbc80db32774ca9f11242ef4c6912ffebb3a58f35ee786f9a6e622d8266d14e3678b27af4e3b75c5c41f9da1c |
| Sha512 | c823d26fe18d84154de8d348905f6a1ab95f11b0624fae692118e9168047f81636459729f6e5beebd1f71ab43fa7887f4efdc08f2f7cdb715154d5b2721c10c8 |
| SSDeep | 24:896br4+f6lngQibWCueUW2ncSr6V3805lfCsohDbNpWoqtWcOUvZOM/8CW:896I+ff158cSr6Vs0ZobppqlvZ |
| TLSH | B8416D6447F54748F9B64A3D6C7AB2119572BA0CDE1987CD1290E5088C6032CE978F3F |
Malicious
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
lnk~T1027~T1059.001~T1059.003~T1202~T1204.002~T1218>lnk:cmd~T1059.001>scr:ps1~T1027~T1059.001
Shape
lnk>lnk:cmd>scr:ps1
malicious
3 nodes
Path
lnk~T1027~T1059.001~T1059.003~T1202~T1204.002~T1218>scr:ps1~T1027~T1059.001
Shape
lnk>scr:ps1
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell
UNKNWOWNmalicious
$d = Nhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
Malicious
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
IMG_20260908_075537.jpg.lnk
Deobfuscated PowerShell
UNKNWOWNmalicious
$d = Nhuhuhuhuhuhuhuhuhuhuhu
IMG_20260908_075537.jpg.lnk › LNK CommandLine › [PowerShell Command]
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.