popup

Report - references.pdf.lnk

Generic Malware Antivirus Lnk Format GIF Format
  1. Resubmit analysis
  2. Detailed report
ScreenShot
Created 2025.04.02 09:48 Machine s1_win7_x6402
Filename references.pdf.lnk
Type MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=11, Archive, ctime=Thu Jan 16 03:11:30 2025, mtime=Tue Mar 18 21:52:55 2025, atime=Thu Jan 16 03:11
AI Score Not founds Behavior Score
1.6
ZERO API file : clean
VT API (file) 12 detected (Malcode, LNKEXEC, WinLNK, Detected, RM8BIJ)
md5 99e60187abde030675774de31cc6e8d6
sha256 bf3b19c30085a9611650aa283856bf3defec894aae0b303ccf90244746127206
ssdeep 24:8N5lJ1/La0i0AlPAg+/J+vZdYMrYqVPqOYbXQaR3+P/R2SRHe06N+/fm2:8N5lP/G0iD256YoBZfYbXv3yR2Sr6N0
imphash
impfuzzy
  No network connection information

Signature (4cnts)

Level Description
watch File has been identified by 12 AntiVirus engines on VirusTotal as malicious
notice Allocates read-write-execute memory (usually to unpack itself)
notice Creates a shortcut to an executable file
info Command line console output was observed

Rules (4cnts)

Level Name Description Collection
warning Generic_Malware_Zero Generic Malware binaries (upload)
watch Antivirus Contains references to security software binaries (upload)
info lnk_file_format Microsoft Windows Shortcut File Format binaries (upload)
info Lnk_Format_Zero LNK Format binaries (upload)

Network (0cnts) ?

Request CC ASN Co IP4 Rule ? ZERO ?

Suricata ids


Similarity measure (PE file only) - Checking for service failure