Malicious
7e034642aa06dd01f80476fd027eb51e
LNK File
MD5: 7e034642aa06dd01f80476fd027eb51e
Size: 1.03 KB
application/x-ms-shortcut
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Shortcut Link File
Size
1.03 KB · 1,032 B
First seen
2026-07-16 07:47 · 3 months ago
Last seen
2026-07-16 07:47 · 3 months ago
Last analysis
2026-07-17 07:40 · 3 months ago
Hashes
MD5
7e034642aa06dd01f80476fd027eb51e
Sha1
927315442d3cce6f101cd97df851df20ff619955
Sha256
4e81d94aa44752c3077a3f5039159f47797a3ffaa1def4d6147b657b79e0534c
Sha384
588d3da06a466be261f77d297b8c19e2f2d0b2991a7d25e8f2509bc9956c62ba76c2e0bee4f8b8965ef30512a243f7d9
Sha512
88e5e98df7d64cd7f7bafe00618063188901d87c549db6f1aa3dc5eedfb603fc509fae50459bb7ad3ae823d291e526bea1006b1c8be7952140ab1e2881b42b6d
SSDeep
6:4xtiy6LgolHKlFcnlj+SEEgykQLPfBMlpIoF6SaU/k1ARokJxt:8oyj4QkCikQLhMbHFMf8
TLSH
D911C2601BCB5A00F3F58B30BC3A921519647C2C89318B8D0385196C0C26A109826F36
7 malicious · 7 files
LNK7e034642aa06dd01f80476fd027eb51eT1027 · T1059.001 · T1059.003LOLBin
SHLNK CommandLineT1027 · T1059.001
PS1[PowerShell Command]T1027 · T1059.001
PS1[Deobfuscated PS]T1059.001
PS1[Lnk Summary]T1027 · T1059.001
PS1[PowerShell Command]T1027 · T1059.001
PS1[Deobfuscated PS]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd>scr:ps1~T1027~T1059.001
Shape
lnk>lnk:cmd>scr:ps1
malicious
3 nodes
Path
lnk~T1059.001~T1059.003~T1202~T1204.002>scr:ps1~T1027~T1059.001
Shape
lnk>scr:ps1
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell
UNKNWOWNmalicious
"iex(ihuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell
UNKNWOWNmalicious
Invokehuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential7 malicious · 7 files
LNK7e034642aa06dd01f80476fd027eb51eT1027 · T1059.001 · T1059.003LOLBin
SHLNK CommandLineT1027 · T1059.001
PS1[PowerShell Command]T1027 · T1059.001
PS1[Deobfuscated PS]T1059.001
PS1[Lnk Summary]T1027 · T1059.001
PS1[PowerShell Command]T1027 · T1059.001
PS1[Deobfuscated PS]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
7e034642aa06dd01f80476fd027eb51e
Deobfuscated PowerShell
UNKNWOWNmalicious
"iex(ihuhuhuhuhuhuhuhuhuhuhu
7e034642aa06dd01f80476fd027eb51e › [Lnk Summary] › [PowerShell Command]
Deobfuscated PowerShell
UNKNWOWNmalicious
Invokehuhuhuhuhuhuhuhuhuhuhu
7e034642aa06dd01f80476fd027eb51e › LNK CommandLine › [PowerShell Command]
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account