Suspect
8d0181e4902ed41a34a6040769e5e425
LNK File
MD5: 8d0181e4902ed41a34a6040769e5e425
Size: 1.51 KB
application/x-ms-shortcut
This sample is a 1.5 KB LNK File for which Malva.RE's static analysis did not establish a malicious verdict. Observed behaviours map to MITRE ATT&CK T1059.003, T1202: INDIRECT COMMAND EXECUTION, T1204.002 and T1218: SYSTEM BINARY PROXY EXECUTION. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 1e2020b6233c1c80c9795f42c681edf76a56c310c56d3c9491ac61a497565141
- MD5
- 8d0181e4902ed41a34a6040769e5e425
- Verdict
- Inconclusive
- File type
- LNK File · 1.5 KB
Cite this report: https://app.malva.re/sha256/1e2020b6233c1c80c9795f42c681edf76a56c310c56d3c9491ac61a497565141
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Shortcut Link File
Size
1.51 KB · 1,512 B
First seen
2026-09-24 09:30 · one month ago
Last seen
2026-09-24 09:30 · one month ago
Last analysis
2026-09-24 09:30 · one month ago
Hashes
MD5
8d0181e4902ed41a34a6040769e5e425
Sha1
2d2f92b0e24cb636a5c4a093714f06a3405d51d6
Sha256
1e2020b6233c1c80c9795f42c681edf76a56c310c56d3c9491ac61a497565141
Sha384
cc5fb1c15a1e84d420da9bb94343e1cf48207c2f58f5940304e8eb5f2bc9b5296245f9e521ea13b0c807a1182778df68
Sha512
198ebc4fb9cf22a8f9756155e4c16f48e7ba7b7e3b79b77ca0826cd90c42699c4fedf07e2c986acb99864f1e4f7d18a2253c6118019c24e3cb316fc1e0cd120c
SSDeep
24:8vU5JomZnoP3yuBCBJBZ1+/5+tiXExC5y244C4aLM963n8G63nkdd2kab7gL7mC:8LmZnwpaJUxXEwMoC4UMoXcXkdBa/ef
TLSH
4E31E0540EF90236E3BA4D3684BE63119A72B542AE35CE9D0580864C4816B03FF7EF6E
1 file
LNK8d0181e4902ed41a34a6040769e5e425T1059.003 · T1204.002 · T1202: Indirect Command Execution
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
lnk~T1059.003~T1202~T1204.002~T1218
Shape
lnk
technique1 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential1 file
LNK8d0181e4902ed41a34a6040769e5e425T1059.003 · T1204.002 · T1202: Indirect Command Execution
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
8d0181e4902ed41a34a6040769e5e425
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account