Malicious
Malicious

754307f619eb7f09210b95c0361a13bf

LNK File
MD5: 754307f619eb7f09210b95c0361a13bf
Size: 2.03 KB
application/x-ms-shortcut
Ctrl + scroll to zoom · drag to pan

This sample is a 2 KB LNK File classified as malicious by Malva.RE. Static analysis extracted 1 embedded or derived file. Observed behaviours map to MITRE ATT&CK T1059.003, T1202: INDIRECT COMMAND EXECUTION, T1204.002 and T1218: SYSTEM BINARY PROXY EXECUTION. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
3147f07bd6405ecafa1c40012524ab48aa62234e9556b2f9a88a83624e10c385
MD5
754307f619eb7f09210b95c0361a13bf
Verdict
Malicious
File type
LNK File · 2 KB
MITRE ATT&CK
T1059.003T1202: INDIRECT COMMAND EXECUTIONT1204.002T1218: SYSTEM BINARY PROXY EXECUTION

Cite this report: https://app.malva.re/sha256/3147f07bd6405ecafa1c40012524ab48aa62234e9556b2f9a88a83624e10c385

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
Shortcut Link File
Size
2.03 KB · 2,027 B
First seen
2026-10-27 12:00 · 5 days ago
Last seen
2026-10-27 12:00 · 5 days ago
Last analysis
2026-10-27 12:00 · 5 days ago
Hashes
MD5 754307f619eb7f09210b95c0361a13bf Sha1 be4c1d9d396a5b152e567e74fbc06c293f974b21 Sha256 3147f07bd6405ecafa1c40012524ab48aa62234e9556b2f9a88a83624e10c385 Sha384 ff8a6b0a43f1722e7a009860fa7ce077f7d6e6f770cba0460b906dbe558fe9ecbabe93c2f22219b21bf40555201282bc Sha512 211fb53fa319e2fecc4436e2be21c4878ceaa94419140e4f344d8bef81ec84b4697e58ff58f9c646c8af291f6603b63610a6ebd6c8c18c0f66ea437d4bab80cf SSDeep 24:8peJbDblK+VpoA2LPXNnwTcSmR+/QT4I02yHab/QvlV5m:8pYXlKyPgerQfMIuabQvlr TLSH 1C41C4195B854A32D6F28F3764FEA3156931B887FD62CF39099442885C50601FC35B29

2 malicious · 2 files
LNK754307f619eb7f09210b95c0361a13bf
BIN[Lnk Summary]
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path lnk~T1059.003~T1202~T1204.002~T1218
Shape lnk
malicious 1 nodes

LNK: Command Execution UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential

2 malicious · 2 files
LNK754307f619eb7f09210b95c0361a13bf
BIN[Lnk Summary]
No malware configuration was found at this point.

LNK: Command Execution UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
754307f619eb7f09210b95c0361a13bf
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙