Managed XDR

code.js-shortcut.lnk — malware analysis report

File info

Filename
code.js-shortcut.lnk
File type
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Archive, ctime=Wed Jul 9 12:32:15 2025, mtime=Wed Jul 23 14:47:36 2025, atime=Wed Jul 9 12:32:15 2025, length=376832, window=hide
File size
1.1 KB
First seen
Last seen

Environment

win7/x64 en

Hashes

SHA1
2f92c1fb76239eebe32b8f0a41f80880cd924d50
SHA256
36bf54d56bfa89b798e17e950da6ede2f77763571ee1da65681d998692b119aa
MD5
2e1fa3b01a560a684d9ed8a0708aff56

Signatures

Execution

T1204 suspicious_lnk: LNK file with suspicious content

Defense Evasion

T1027.002 unnamed_memory_regions: Code was executed in unnamed regions
T1497.001 antisandbox_script_timer: Detected script timer window (indicative of sleep style evasion)

Credential Access

T1552 cookie_files: Accesses cookie files
T1555.003 cookie_files: Accesses cookie files

Discovery

T1497.001 antisandbox_script_timer: Detected script timer window (indicative of sleep style evasion)

Command and Control

T1071.001 wininet_openurl: Performs HTTP/HTTPS-requests using InternetOpenUrl

Other

creates_in_windows: Creates files in the Windows directory
unexpected_exception: Unexpected exception
no_graphical_activity: No graphic activity
creates_suspended_process: Creates suspended process
message_box: Displays a message
yara_rules: Static rules
Managed XDR