Malicious
b791c416988d068a3e548a0f21cd3518
LNK File
MD5: b791c416988d068a3e548a0f21cd3518
Size: 2.2 KB
application/x-ms-shortcut
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Shortcut Link File
Size
2.2 KB · 2,195 B
First seen
2026-06-23 12:46 · 4 months ago
Last seen
2026-06-23 12:46 · 4 months ago
Last analysis
2026-06-27 06:00 · 4 months ago
Hashes
MD5
b791c416988d068a3e548a0f21cd3518
Sha1
1dd1a423b4bf5c2bad0953873088b2aa5c9a53f8
Sha256
2e879dd65f29a3785e37e1cc4c5dfe66e61c71e7304fc9d4fd1cf70fd660fce7
Sha384
405d3264c9818ebb2a49f61d151fed5d6421af38dcd73a252f2859efbc3387bfcb1c53f5704e06968f42ff3a0d6f3dc6
Sha512
8055c36b76733aeacffdbf728cdea302fe90e5209fe5bba63e39fc4646d452c50da74c2b4961b9e209491e2ad1ceb5d4b3a8a3bf8fd57e27458e55595d9a8acf
SSDeep
48:8CvXFLa7iiHqpfVp2i8upIm+9Ih5VkEKp/NbYArIV2:8CvXFlWqzUrumO5VkEKpRPre
TLSH
D6416C0526F91711F3F35E36DDBBA2A1893A7ACAE5B5875D308C514A47A02049D17F33
7 malicious · 7 files
LNKb791c416988d068a3e548a0f21cd3518T1059.001 · T1059.003 · T1204.002LOLBin
SHLNK CommandLine
PS1[Deobfuscated PS]
PS1[PowerShell Command]
PS1[Deobfuscated PS]
PS1[Lnk Summary]
PS1[Deobfuscated PS]
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell
UNKNWOWNmalicious
/c "phuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell
UNKNWOWNmalicious
"; [Syhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential7 malicious · 7 files
LNKb791c416988d068a3e548a0f21cd3518T1059.001 · T1059.003 · T1204.002LOLBin
SHLNK CommandLine
PS1[Deobfuscated PS]
PS1[PowerShell Command]
PS1[Deobfuscated PS]
PS1[Lnk Summary]
PS1[Deobfuscated PS]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
b791c416988d068a3e548a0f21cd3518
Deobfuscated PowerShell
UNKNWOWNmalicious
/c "phuhuhuhuhuhuhuhuhuhuhu
b791c416988d068a3e548a0f21cd3518 › LNK CommandLine
Deobfuscated PowerShell
UNKNWOWNmalicious
"; [Syhuhuhuhuhuhuhuhuhuhuhu
b791c416988d068a3e548a0f21cd3518 › LNK CommandLine › [PowerShell Command]
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account