Deep Malware Analysis of IMG_20260908_075537.jpg.lnk | md5: 18c60bc9dd783b5ed3d86c248a60dcb3 | LNK | Malicious | LOLBin | T1218: System Binary Proxy Execution | LOLBin:powershell.exe | Execution: CMD in LNK | T1059.003 | T1202: Indirect Command Execution | T1204.002 | Execution: PowerShell in LNK | T1059.001 | PowerShell | Batch Command | PowerShell Call | T1027 | DeObfuscated

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	18c60bc9dd783b5ed3d86c248a60dcb3
Sha1	a9be70799072dc4fb3e54ed5e510eed338249e8e
Sha256	324e612220df1f9786420e288b92abcc04cea9bb4166ef033228d977e34412fd
Sha384	30fd822dbc80db32774ca9f11242ef4c6912ffebb3a58f35ee786f9a6e622d8266d14e3678b27af4e3b75c5c41f9da1c
Sha512	c823d26fe18d84154de8d348905f6a1ab95f11b0624fae692118e9168047f81636459729f6e5beebd1f71ab43fa7887f4efdc08f2f7cdb715154d5b2721c10c8
SSDeep	24:896br4+f6lngQibWCueUW2ncSr6V3805lfCsohDbNpWoqtWcOUvZOM/8CW:896I+ff158cSr6Vs0ZobppqlvZ
TLSH	B8416D6447F54748F9B64A3D6C7AB2119572BA0CDE1987CD1290E5088C6032CE978F3F

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path lnk~T1027~T1059.001~T1059.003~T1202~T1204.002~T1218>lnk:cmd~T1059.001>scr:ps1~T1027~T1059.001

Shape lnk>lnk:cmd>scr:ps1

malicious 3 nodes

Path lnk~T1027~T1059.001~T1059.003~T1202~T1204.002~T1218>scr:ps1~T1027~T1059.001

Shape lnk>scr:ps1

malicious 2 nodes

LNK: Command Execution UNKNWOWNmalicious

powershuhuhuhuhuhuhuhuhuhuhu

Deobfuscated PowerShell UNKNWOWNmalicious

$d = Nhuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential