Malicious LNK File analysis – 324e612220df

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

File

Type

Shortcut Link File

Size

1.97 KB · 1,967 B

First seen

2026-09-10 06:15 · one month ago

Last seen

2026-09-10 06:15 · one month ago

Last analysis

2026-09-10 06:15 · one month ago

Hashes

MD5 18c60bc9dd783b5ed3d86c248a60dcb3 Sha1 a9be70799072dc4fb3e54ed5e510eed338249e8e Sha256 324e612220df1f9786420e288b92abcc04cea9bb4166ef033228d977e34412fd Sha384 30fd822dbc80db32774ca9f11242ef4c6912ffebb3a58f35ee786f9a6e622d8266d14e3678b27af4e3b75c5c41f9da1c Sha512 c823d26fe18d84154de8d348905f6a1ab95f11b0624fae692118e9168047f81636459729f6e5beebd1f71ab43fa7887f4efdc08f2f7cdb715154d5b2721c10c8 SSDeep 24:896br4+f6lngQibWCueUW2ncSr6V3805lfCsohDbNpWoqtWcOUvZOM/8CW:896I+ff158cSr6Vs0ZobppqlvZ TLSH B8416D6447F54748F9B64A3D6C7AB2119572BA0CDE1987CD1290E5088C6032CE978F3F

7 malicious · 7 files

LNKIMG_20260908_075537.jpg.lnk

SHLNK CommandLine

PS1[PowerShell Command]

PS1[Deobfuscated PS]

PS1[Lnk Summary]

PS1[Deobfuscated PS]

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path lnk~T1027~T1059.001~T1059.003~T1202~T1204.002~T1218>lnk:cmd~T1059.001>scr:ps1~T1027~T1059.001

Shape lnk>lnk:cmd>scr:ps1

malicious 3 nodes

Path lnk~T1027~T1059.001~T1059.003~T1202~T1204.002~T1218>scr:ps1~T1027~T1059.001

Shape lnk>scr:ps1

malicious 2 nodes

LNK: Command Execution UNKNWOWNmalicious

powershuhuhuhuhuhuhuhuhuhuhu

Deobfuscated PowerShell UNKNWOWNmalicious

$d = Nhuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential