MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 d2ca171649dc70dc68f9f9cffedac5c730135f148f1339d0bc712e3e96dfc91b. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	d2ca171649dc70dc68f9f9cffedac5c730135f148f1339d0bc712e3e96dfc91b
SHA3-384 hash:	e3ac446f9c8daff15b309ec39de4672ee16bb309ab233b1d0b8af7c0786b68d3a0685625da44946d9c59c2f305fa6ef2
SHA1 hash:	e92fadea2e61fd1e02ed08993161dbcc19a8145f
MD5 hash:	0c5be17c53a84164d5854c3a2dc359e6
humanhash:	cardinal-maine-butter-fish
File name:	basic information.lnk
Download:	download sample
File size:	1'472 bytes
First seen:	2026-09-22 15:18:58 UTC
Last seen:	Never
File type:	lnk
MIME type:	application/x-ms-shortcut
ssdeep	24:8+Hn8sAvZA5li+r20+mJWYaEtxKAQ4aHDJdpzmQV:8YaZMi+r20/eEtoAQ4AJdpzr
TLSH	T1BD311D274BEFAB65F2FB0FB4623642248B323D122C69F12E5040119D14B1D58C9B1F3B
Magika	lnk
Reporter	abuse_ch
Tags:	lnk

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

70

Origin country :

SE

Vendor Threat Intelligence

ACCE Windows_LNK

Malware configuration found for:

LNK

Details

Link:

https://research.acce.ciphertechsolutions.com/results/e1385588-9f7c-404d-b7c2-b999061dd279/

DocGuard Malicious

Result

Verdict:

Malicious

File Type:

LNK File - Malicious

Link:

https://app.docguard.net/d2ca171649dc70dc68f9f9cffedac5c730135f148f1339d0bc712e3e96dfc91b/results/dashboard

Behaviour

BlacklistAPI detected

FileScan.IO Unknown

Verdict:

Unknown

Threat level:

  0/10

Confidence:

100%

Link:

https://www.filescan.io/uploads/6ab29c6b60fa2f1bc9d2a7c3/reports/049f88ef-43ad-4278-bacc-ea5d60a06876/overview

Hybrid Analysis Unknown

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/d2ca171649dc70dc68f9f9cffedac5c730135f148f1339d0bc712e3e96dfc91b

Kaspersky OpenTIP Unknown

Verdict:

Unknown

File Type:

lnk

Link:

https://opentip.kaspersky.com/d2ca171649dc70dc68f9f9cffedac5c730135f148f1339d0bc712e3e96dfc91b/results?tab=lookup

Joe Sandbox unknown

Result

Threat name:

n/a

Detection:

unknown

Classification:

n/a

Score:

0 / 100

Link:

https://www.joesandbox.com/analysis/1976258

Behaviour

Behavior Graph:

Download SVG

Malva.RE inconclusive

Verdict:

inconclusive

YARA:

2 match(es)

Tags:

LNK

Link:

https://app.malva.re/file/0c5be17c53a84164d5854c3a2dc359e6

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/d2ca171649dc70dc68f9f9cffedac5c730135f148f1339d0bc712e3e96dfc91b/

ReversingLabs TitaniumCloud Binary.Trojan.Generic

Threat name:

Binary.Trojan.Generic

Alert

Create hunting rule

Status:

Suspicious

First seen:

2026-09-22 12:57:11 UTC

File Type:

Binary

AV detection:

3 of 24 (12.50%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=2lfbofsj3ryny2hz7hh75wwfy4ybgxyur4jttuf4oexd5fw7zenq._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

execution

Link:

https://tria.ge/reports/260922-sp9msswta1/

Behaviour

Enumerates physical storage devices

Executes a command shell one-liner

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.10

Link:

https://yomi.yoroi.company/submissions/d2ca171649dc70dc68f9f9cffedac5c730135f148f1339d0bc712e3e96dfc91b