Malicious
LNK File
MD5: e887bd3da38db284176b6644523f58a9
Size: 1.36 KB
application/x-ms-shortcut
Ctrl + scroll to zoom · drag to pan
This sample is a 1.3 KB LNK File for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 1 embedded or derived file. Observed behaviours map to MITRE ATT&CK T1218. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- c9008ac942ce5ac425fa41870069bc1a06a5561e1dc61af71700cadb682849e6
- MD5
- e887bd3da38db284176b6644523f58a9
- Verdict
- Malicious
- File type
- LNK File · 1.3 KB
- MITRE ATT&CK
- T1218
Cite this report: https://app.malva.re/sha256/c9008ac942ce5ac425fa41870069bc1a06a5561e1dc61af71700cadb682849e6
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Shortcut Link File
Size
1.36 KB · 1,355 B
First seen
2026-10-28 10:45 · 4 days ago
Last seen
2026-10-28 10:45 · 4 days ago
Last analysis
2026-10-28 10:45 · 4 days ago
Hashes
MD5
e887bd3da38db284176b6644523f58a9
Sha1
ea02b9035771a579ae8a928e18fdfbd265a48542
Sha256
c9008ac942ce5ac425fa41870069bc1a06a5561e1dc61af71700cadb682849e6
Sha384
7cf3a59ac3b950933557a8a4a8f427e7528dcce9eb1ef843916f2086a5d7893353d8db14f85f0213618b90681bfd457e
Sha512
1fbefe56da5e392ec9f5db1f371578102574652edacdd0d933788f49a015319bdc9c79f3b1d1a97ef4907c30aa9b72195497a870e9caa72c0624751dc65fa85b
SSDeep
24:8mnJwu4D88gA56d+/x4dsukYqVRNGLGYEZqhWlrcmN:8mnSue3B4dslBB2fZhW5c
TLSH
CC219B181BE51B25F3B34E324977A7359E3BB80596438A6E4091C28D0C66B01AE29F7B
2 malicious · 2 files
LNKe887bd3da38db284176b6644523f58a9T1218
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
lnk~T1218
Shape
lnk
malicious
1 nodes
LNK: Script Execution
UNKNWOWNmalicious
wscriphuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential