Malicious
1e559d44c840e5204d2f49e181718442
LNK File
MD5: 1e559d44c840e5204d2f49e181718442
Size: 2.19 KB
application/x-ms-shortcut
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
| MD5 | 1e559d44c840e5204d2f49e181718442 |
| Sha1 | fabf98560a374c73a6d17485d8a73d724001a467 |
| Sha256 | 867698b09d1780c28a5f2eb751a932521b3e2cbb79c22ae726da7db378e977f3 |
| Sha384 | 6e7cc4fd54b1680efb0e4dc9afdecd59b46b47eee5f5259abb0eae07277be2293ffd1b083c29e2763706c34c700241a9 |
| Sha512 | 5bf2e02cdb34f9dfb1d50aa6291b6ac3edf799d97493a2bf9364db3af1d11fbc1db73741f875859e5eeee45d6104a1e1d9180746be930f91143511f30f5d0b94 |
| SSDeep | 24:8Ayw/BHYVKVWl+/CWxlVytW8AddNXuHY8HXJ4:8y5a0lV+XAdLXuHjJ |
| TLSH | D0416D181BE50718F3F38B35A8BB6710D97BBC99EE518F8D0080918C1472624E4BAF6B |
Malicious
Malicious
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
lnk~T1059.001~T1059.003~T1202~T1204.002~T1218>lnk:cmd>scr:ps1~T1027~T1059.001
Shape
lnk>lnk:cmd>scr:ps1
malicious
3 nodes
LNK: Command Execution
UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell
UNKNWOWNmalicious
"$f=[Ihuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
Malicious
Malicious
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
1e559d44c840e5204d2f49e181718442
Deobfuscated PowerShell
UNKNWOWNmalicious
"$f=[Ihuhuhuhuhuhuhuhuhuhuhu
1e559d44c840e5204d2f49e181718442 › LNK CommandLine › [PowerShell Command]
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.