Malicious
Ctrl + scroll to zoom · drag to pan
The file 4802a32f1c341939b527bef836220fcf is a LNK File for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 5 embedded or derived files. It matches 2 YARA rules. Observed behaviours map to MITRE ATT&CK T1059.001, T1059.003, T1202: INDIRECT COMMAND EXECUTION and T1204.002. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- —
- MD5
- -
- Verdict
- Malicious
- File type
- LNK File
- Category
- LOLBin
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Shortcut Link File
5 malicious · 6 files
LNK4802a32f1c341939b527bef836220fcfT1059.001 · T1059.003 · T1204.002LOLBin
SHLNK CommandLine
PS1[PowerShell Command]
PS1[Deobfuscated PS]
BIN[Base64-Block]
BIN[Lnk Summary]
LNK: Command Execution
UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell
UNKNWOWNmalicious
-e "chuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential