Malicious
LNK File
MD5: 336d861178e3bde015c91c1e87a59059
Size: 1.03 KB
application/x-ms-shortcut
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Shortcut Link File
Size
1.03 KB · 1,032 B
First seen
2026-07-16 07:46 · 3 months ago
Last seen
2026-07-16 07:46 · 3 months ago
Last analysis
2026-07-18 19:00 · 3 months ago
Hashes
MD5
336d861178e3bde015c91c1e87a59059
Sha1
4184e883c605936cb964c8ec6ca30fc20a38c110
Sha256
81254cfb6f4eee19aed87a2a5d526654455e911cee51665739d572f698dc97f5
Sha384
5a91a4871b4eeff03d5aa1b882a331052971bcf633ba9c061ec922b4a991a9c859cf64115f1f0e0a05647f3ce3499e6f
Sha512
d969934890ff624545808a0ae2cbbccb128d3d2291c004f7e0bd9c1f315ea1cd3ffbfb6b8aa3dabecce06090d98b72c9fe0e507d7f8382b951519e9cb57b064b
SSDeep
6:4xtisdS2ndS2nHolHKlFcnlj+SEEgykQLPfBMlpIoF6SaU/k1ARokJxt:8oUXx4QkCikQLhMbHFMf8
TLSH
55112B301BCB5A00F3F54B35BC3EB3012975BC0C8D314ADD928519AC0C26A109C35F36
7 malicious · 7 files
LNK336d861178e3bde015c91c1e87a59059T1027 · T1059.001 · T1059.003LOLBin
SHLNK CommandLineT1027 · T1059.001
PS1[PowerShell Command]T1027 · T1059.001
PS1[Deobfuscated PS]T1059.001
PS1[Lnk Summary]T1027 · T1059.001
PS1[PowerShell Command]T1027 · T1059.001
PS1[Deobfuscated PS]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd>scr:ps1~T1027~T1059.001
Shape
lnk>lnk:cmd>scr:ps1
malicious
3 nodes
Path
lnk~T1059.001~T1059.003~T1202~T1204.002>scr:ps1~T1027~T1059.001
Shape
lnk>scr:ps1
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell
UNKNWOWNmalicious
"iex(ihuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell
UNKNWOWNmalicious
Invokehuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential