Malicious
LNK File
MD5: e7d14a301bef41d36f7de8b0a7fe523e
Size: 1.03 KB
application/x-ms-shortcut
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Shortcut Link File
Size
1.03 KB · 1,032 B
First seen
2026-07-15 12:01 · 3 months ago
Last seen
2026-07-15 12:01 · 3 months ago
Last analysis
2026-07-15 19:21 · 3 months ago
Hashes
MD5
e7d14a301bef41d36f7de8b0a7fe523e
Sha1
19b1ec1802e3b2324eba7add6898026c99085699
Sha256
e0cbbb0d0b53509ccae1da6ea6f1b084c20d72e8723b98bb2aa5cced01f7b414
Sha384
7a7e69d3e8f0e12f19050523038dbc88b1f74934e730ede648a3ffa0b5a10f218ffcf761f7b09135d742dce21822c4f2
Sha512
6e11c7c670130ddd725432aefae263f7350a7fd32ff595d2a21e2204893152cd8430fd6e4aec154a67d5c10a8b093ecadf3f0b3b7a20d585ebc62a019d0d46dc
SSDeep
6:4xti9X3X3/lKolHKlFcnlj+SEEgykQLPfBMlpIoF6SaU/k1ARokJxt:8ol04QkCikQLhMbHFMf8
TLSH
0911C2251BCA4E00E2F5AB34BC38960119A87C6C8D314A8D0286195C0C26A209A75F36
7 malicious · 7 files
LNKe7d14a301bef41d36f7de8b0a7fe523eT1027 · T1059.001 · T1059.003LOLBin
SHLNK CommandLineT1027 · T1059.001
PS1[PowerShell Command]T1027 · T1059.001
PS1[Deobfuscated PS]T1059.001
PS1[Lnk Summary]T1027 · T1059.001
PS1[PowerShell Command]T1027 · T1059.001
PS1[Deobfuscated PS]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd>scr:ps1~T1027~T1059.001
Shape
lnk>lnk:cmd>scr:ps1
malicious
3 nodes
Path
lnk~T1059.001~T1059.003~T1202~T1204.002>scr:ps1~T1027~T1059.001
Shape
lnk>scr:ps1
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell
UNKNWOWNmalicious
"iex(ihuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell
UNKNWOWNmalicious
Invokehuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential