Malicious
ba109362e9a98b65761041a92f46e9d1
LNK File
MD5: ba109362e9a98b65761041a92f46e9d1
Size: 48.7 KB
application/x-ms-shortcut
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Shortcut Link File
Size
48.7 KB · 48,695 B
First seen
2026-07-13 18:46 · 3 months ago
Last seen
2026-07-13 18:46 · 3 months ago
Last analysis
2026-07-13 18:46 · 3 months ago
Hashes
MD5
ba109362e9a98b65761041a92f46e9d1
Sha1
6a30740ca02c1aa44fe00e511348614245346bfc
Sha256
e7f36ff4274b1fa4afb48a002b85aed82d788a399b0db3d5a4e886238777fb37
Sha384
f05f31276c9203e17c15a8d17263925e3d76eaa574ed35079c0f0a609a548d9c5b79c3f8efada75944c87d7b1f6e92ce
Sha512
9be7c39bc851851b1aae7d9dd9ac301dc1fcd4003ed0661d9da37f4e44d63238962ce45a5cbba22a99ac22b9596eed6babe7d1bc539f2427da165d84a64e81cc
SSDeep
768:wSN7u11CTYLfuI1XrhCZDx2HT7TKjntRqoRs0WQS90i73ErsOToBZE06/6DL5z3:wv40LfuI1bhCZduGjnrxS90i70TiZE0L
TLSH
E2232912CE9F2D40CB6842BBA1CF05E5195D079F32A20DCF269BF740EE5B4B521D5AE4
7 malicious · 7 files
LNKba109362e9a98b65761041a92f46e9d1T1027 · T1059.001 · T1059.003LOLBin
SHLNK CommandLineT1027 · T1059.001
PS1[Deobfuscated PS]T1027 · T1059.001
PS1[Deobfuscated PS]T1059.001
PS1[Lnk Summary]T1027 · T1059.001
PS1[Deobfuscated PS]T1027 · T1059.001
PS1[Deobfuscated PS]T1059.001
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
lnk~T1027~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd~T1027~T1059.001
Shape
lnk>lnk:cmd
malicious
2 nodes
Path
lnk~T1027~T1059.001~T1059.003~T1202~T1204.002>scr:ps1~T1027~T1059.001
Shape
lnk>scr:ps1
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell
UNKNWOWNmalicious
-ep "huhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell
UNKNWOWNmalicious
-ep "huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential7 malicious · 7 files
LNKba109362e9a98b65761041a92f46e9d1T1027 · T1059.001 · T1059.003LOLBin
SHLNK CommandLineT1027 · T1059.001
PS1[Deobfuscated PS]T1027 · T1059.001
PS1[Deobfuscated PS]T1059.001
PS1[Lnk Summary]T1027 · T1059.001
PS1[Deobfuscated PS]T1027 · T1059.001
PS1[Deobfuscated PS]T1059.001
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
ba109362e9a98b65761041a92f46e9d1
Deobfuscated PowerShell
UNKNWOWNmalicious
-ep "huhuhuhuhuhuhuhuhuhuhu
ba109362e9a98b65761041a92f46e9d1 › LNK CommandLine
Deobfuscated PowerShell
UNKNWOWNmalicious
-ep "huhuhuhuhuhuhuhuhuhuhu
ba109362e9a98b65761041a92f46e9d1 › LNK CommandLine › [Deobfuscated PS]
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account