Malicious
8cf57f185a27f84a284c7850493748de
LNK File
MD5: 8cf57f185a27f84a284c7850493748de
Size: 2.58 KB
application/x-ms-shortcut
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Shortcut Link File
Size
2.58 KB · 2,578 B
First seen
2026-09-30 08:30 · 25 days ago
Last seen
2026-09-30 08:30 · 25 days ago
Last analysis
2026-09-30 15:47 · 25 days ago
Hashes
MD5
8cf57f185a27f84a284c7850493748de
Sha1
2e4195743463e5f9fbdb3269e350b9f714f7f855
Sha256
523d6d2479a05d5a3c854fe6a76af1156afc05c9a46e1e8f74bea5c8b8d87aa0
Sha384
a6b216335a0a3907cbac12ddce6c8e191f2d09b3e4afff4ce79ffae2f7bd1dc0cf98f82bca5391a3cccc0864beb1a1af
Sha512
cd90060c1344e004ad291e85d6acc882ba5643c2410a4df16b4ab2c34123d7e00a2edcf8d7b59e2ee5c2125e37b4916570c7814aa77fd543dd5ea5ec243d5f7f
SSDeep
48:8DKs2JEC9SYGmmSZS/fLSol0/QIPyDYsF1WGd++BcatFHq4:8DKs2JrmSUDS4sQjDBdFcutq
TLSH
F151DE0827FA4229C2FB8A366CB5F2118236FD58ED524BDE2190964C6C22519E578F3B
5 malicious · 5 files
LNK8cf57f185a27f84a284c7850493748deT1027 · T1059.001 · T1059.003
SHLNK CommandLineT1027 · T1059.001
PS1[PowerShell Command]T1027 · T1059.001
PS1[Deobfuscated PS]
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
lnk~T1059.001~T1059.003~T1202~T1204.002~T1218>lnk:cmd>scr:ps1~T1027~T1059.001
Shape
lnk>lnk:cmd>scr:ps1
malicious
3 nodes
LNK: Command Execution
UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell
UNKNWOWNmalicious
& ((Gehuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential5 malicious · 5 files
LNK8cf57f185a27f84a284c7850493748deT1027 · T1059.001 · T1059.003
SHLNK CommandLineT1027 · T1059.001
PS1[PowerShell Command]T1027 · T1059.001
PS1[Deobfuscated PS]
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
8cf57f185a27f84a284c7850493748de
Deobfuscated PowerShell
UNKNWOWNmalicious
& ((Gehuhuhuhuhuhuhuhuhuhuhu
8cf57f185a27f84a284c7850493748de › LNK CommandLine › [PowerShell Command]
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account