Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 033a35e6dc42e43d77554eaabbf0c468
Sha1 0c83376ed1085d5671dc70e9c45f321e9eb510f6
Sha256 b0ef763f0470f6000d3a7897368df0a32d2d056f3876b65f063da3477becc6d2
Sha384 f28f75ed1fae3c18d14e32874da27951bd9b1083258c5c7ee52619e3d51b012081f64abbdbc2160bb21bc15dce348037
Sha512 9f1f1c570a8d2bd3619b3a618a341441fff0be5e8e7620c76180e851fb044774851c746352b67e65f7d818939476b5cb218282b6c2d12d015ae63f8533d2a7dc
SSDeep 96:ljS7YjaJ7mOa+XStbm5H+JUCKNE6xrDakznsQFeSWBUuYCTMk:ljS7YjW6IXrNET6FeSWdYqMk
TLSH 96B17DA53290C726E83D4F3970C37CEDEDAA92C2450B7712E39C149948EB715AA2F01C
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1
bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd
Shape arc:zip>lnk>lnk:cmd
malicious 3 nodes
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
No malware configuration was found at this point.
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
033a35e6dc42e43d77554eaabbf0c468 › IMG_20260728_111623.jpg.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙