Malicious
LNK File
MD5: eb7ea88f4712635b3ea3d6c625f4eda5
Size: 202.62 KB
application/x-ms-shortcut
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Shortcut Link File
Size
202.62 KB · 202,623 B
First seen
2025-07-12 17:45 · one year ago
Last seen
2025-07-12 17:45 · one year ago
Last analysis
2025-07-12 17:58 · one year ago
Hashes
MD5
eb7ea88f4712635b3ea3d6c625f4eda5
Sha1
e367cce6bedb5c8b9520d6fe6c2491429a2df792
Sha256
4308a4f09494d5d09cb8383c8032c665267d9c88d12c54e3a6ebbbed820df9f5
Sha384
27dc9aea417e6d6c3c3dda30b87c5a967f24fdf07c8ed36582ef5c19fa403dedba51d293df4046c563d601d072bfbdbc
Sha512
c432771da0bfb2f9f23425065ed7f07f6584357cee3eab0f74b832abcb9b48d06d610868b9fe4022abde5687186b9be74eb8cca879e2d10201c5c4ec27113db9
SSDeep
6144:f8rIj7VWxxoeCe7bizap98IfiajB+XhaOgKDwQj6nY:fyIHsxxoeCe/izaAIqSB+xaON4Y
TLSH
1314F145DB262FDEFD3906FC095F5A0988CC5C322D21D4EB9A8F128B4114AD955B392F
9 malicious · 9 files
LNKeb7ea88f4712635b3ea3d6c625f4eda5T1059.001 · T1059.003 · T1204.002LOLBin
SHLNK CommandLine
PS1[Deobfuscated PS]
PS1[PowerShell Command]
PS1[Deobfuscated PS]
PS1[Lnk Summary]
PS1[PowerShell Command]
PS1[Deobfuscated PS]
PS1[Deobfuscated PS]
LNK: Command Execution
UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell
UNKNWOWNmalicious
-windohuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell
UNKNWOWNmalicious
(New-Ohuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential9 malicious · 9 files
LNKeb7ea88f4712635b3ea3d6c625f4eda5T1059.001 · T1059.003 · T1204.002LOLBin
SHLNK CommandLine
PS1[Deobfuscated PS]
PS1[PowerShell Command]
PS1[Deobfuscated PS]
PS1[Lnk Summary]
PS1[PowerShell Command]
PS1[Deobfuscated PS]
PS1[Deobfuscated PS]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
eb7ea88f4712635b3ea3d6c625f4eda5
Deobfuscated PowerShell
UNKNWOWNmalicious
-windohuhuhuhuhuhuhuhuhuhuhu
eb7ea88f4712635b3ea3d6c625f4eda5 › LNK CommandLine
Deobfuscated PowerShell
UNKNWOWNmalicious
(New-Ohuhuhuhuhuhuhuhuhuhuhu
eb7ea88f4712635b3ea3d6c625f4eda5 › LNK CommandLine › [PowerShell Command]
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account