Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 0773d3b4f1cda0057a857435d5b8b85b
Sha1 0ae9524a98c02b3342936d087b4dac71a6efbc22
Sha256 e8a8f15404aff99d1c5ad2406ff7b6944f7164ce453684c49d93f3a43ee348e3
Sha384 c908e8575ae11f2305a939c52c17fb9d18294c91f069c74f00d17af840dd584e8f58d440638337d49649824083cd468e
Sha512 91109bd8d66b6010966ab6b3731f6ca8d6b9deec71dfc76114b8d6b64690db01f43626ebd8bdadf2a7d2226c741dccbcf98f6d57554804e15ef29d03e2a053f8
SSDeep 384:tMuqTQ8LthPh52Q47+0f/VXT1+5d20QtLI:SuuLZ52QC+eZT1Ud20cLI
TLSH CF62D1B74D880BDC9AA175346A9B835B9AF249D74A80EFBF541FB711344B58C250C4EC
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1
bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd
Shape arc:zip>lnk>lnk:cmd
malicious 3 nodes
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
No malware configuration was found at this point.
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
0773d3b4f1cda0057a857435d5b8b85b › IMG_20260724_180639.jpg.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙