Malicious
LNK File
MD5: d009daaa77ac3ae4a6812e8f1fcd63bb
Size: 3.54 KB
application/x-ms-shortcut
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Shortcut Link File
Size
3.54 KB · 3,542 B
First seen
2026-10-14 09:30 · 11 days ago
Last seen
2026-10-14 09:30 · 11 days ago
Last analysis
2026-10-14 09:30 · 11 days ago
Hashes
MD5
d009daaa77ac3ae4a6812e8f1fcd63bb
Sha1
bc6269ed3376d0f0680dbb4351436c71209a8b51
Sha256
5ab77d640643354800ac7a4a31eb407bcc2b56d70d0e9c4853bba07b1d58cb4d
Sha384
51d8e174e86f8de21d0ce3ec281d69c41bc0586ff985e8f99e3427c09a5adab663a037104029f20551d7f65fefbf7026
Sha512
83f107534d2903090665695d2b0c72e4c5e45a3697c84bc349b1e033e127bc3b859da196d94d37c62d61baa032291c4a90b597264db1845eb717751dd9075fef
SSDeep
96:8mleMlQiTSIZmjtfBjqgnjvZl7zqgylkSA1pmvIl+ngx:8ufFrRg1tqgCA14vy
TLSH
77717F0112ED410AF3B7AB7597BF12E04437B9279F30AA2D211C560A4BE1E48A873B77
9 malicious · 9 files
LNKd009daaa77ac3ae4a6812e8f1fcd63bbT1027 · T1059.001 · T1059.003
SHLNK CommandLineT1027 · T1059.001
PS1[PowerShell Command]T1027 · T1059.001
PS1[Deobfuscated PS]T1059.001
PS1[Deobfuscated PS]T1059.001
PS1[Lnk Summary]T1027 · T1059.001
PS1[PowerShell Command]T1027 · T1059.001
PS1[Deobfuscated PS]T1027 · T1059.001
PS1[Deobfuscated PS]T1027 · T1059.001
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
lnk~T1027~T1059.001~T1059.003~T1202~T1204.002~T1218>lnk:cmd~T1027~T1059.001>scr:ps1~T1027~T1059.001
Shape
lnk>lnk:cmd>scr:ps1
malicious
3 nodes
Path
lnk~T1027~T1059.001~T1059.003~T1202~T1204.002~T1218>scr:ps1~T1027~T1059.001
Shape
lnk>scr:ps1
malicious
2 nodes