Malicious
Malicious
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 0aa928627088f5789901d16cae62d5a8
Sha1 8378e098886c04d2d133e5c4f67a951669213e2a
Sha256 a355496c47d79ab9ad373d34192e1d47580668642436912caf5b215d27db02be
Sha384 022e1c3daf4a3b45f8891876a64af6ee7dbc2fccff47b4bde13126f4acba9d0e9db112f9c16c0de3a527aadad428396f
Sha512 5aac8c050c221aa693f41cd7debe348be9085fe9c37e293afd2e2d33dbebda66842665ca4f5249b2fa41a938bb3ed5a2c021f787075b4ff9995e8aa27fb83cf8
SSDeep 24576:SEKWhrgvJ/tCgalVFTYp746l6Q+IwVn+dw:SRWhwVbuTYt46l6Wan+dw
TLSH 640523F2F5868B4D61C2ABED10A18E1E97A03DF4D587A35F10F04592A3492F7ADF894C
0aa928627088f5789901d16cae62d5a8
Malicious
aletheia-unified-verification-environment-proposal.pdf.lnk
Malicious
PDF @0x000001C9
Malicious
[PowerShell Command]
Malicious
PDF @0x000060FA
#Stream obj 160 0
#Stream obj 159 0
#Stream obj 164 0
#Stream obj 156 0
#Stream obj 155 0
#Stream obj 163 0
#Stream obj 4 0
#Stream obj 29 0
#Stream obj 40 0
#Stream obj 167 0
LNK CommandLine
Malicious
[PowerShell Command]
Malicious
[PowerShell Command]
Malicious
[Lnk Summary]
Malicious
[PowerShell Command]
Malicious
[Base64-Block]
Malicious
[PowerShell Command]
Malicious
[Base64-Block]
Malicious
[Base64-Block]
Malicious
[PowerShell Command]
Malicious
published-solidity-testing-environments.pdf.lnk
Malicious
PDF @0x000001B3
Malicious
[PowerShell Command]
Malicious
PDF @0x000060D0
Text (Preview)
Page #1
#Stream obj 92 0
#Stream obj 91 0
#Stream obj 96 0
#Stream obj 4 0
#Stream obj 21 0
#Stream obj 32 0
#Stream obj 98 0
Structure
LNK CommandLine
Malicious
[PowerShell Command]
Malicious
[Base64-Block]
Malicious
[Base64-Block]
Malicious
[Base64-Block]
Malicious
[PowerShell Command]
Malicious
[Lnk Summary]
Malicious
[PowerShell Command]
Malicious
[PowerShell Command]
Malicious
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
4 / 4
Path arc:zip>lnk~T1027~T1059.001~T1059.003~T1202~T1204.002~T1218>scr:ps1~T1059.001>pdf>pdf:stream>bin
Shape arc:zip>lnk>scr:ps1>pdf>pdf:stream>bin
malicious 6 nodes
Path arc:zip>lnk~T1027~T1059.001~T1059.003~T1202~T1204.002~T1218>scr:ps1~T1027~T1059.001>pdf>pdf:stream>bin
Shape arc:zip>lnk>scr:ps1>pdf>pdf:stream>bin
malicious 6 nodes
Name Value
Version
1.5
Author
AI Doc Maker
CreationDate
D:20261018190053-07'00'
Creator
??�M�i�c�r�o�s�o�f�t�?� �W�o�r�d� �2�0�1�3
ModifiedDate
D:20261018190053-07'00'
Subject
Overview of frameworks, local simulators, browser IDEs, and public testnets
Title
Choosing a Solidity Testing Environment
Producer
??�M�i�c�r�o�s�o�f�t�?� �W�o�r�d� �2�0�1�3
Version
1.5
Author
OpenAI
CreationDate
D:20261018190423-07'00'
Creator
??�M�i�c�r�o�s�o�f�t�?� �W�o�r�d� �2�0�1�3
ModifiedDate
D:20261018190423-07'00'
Subject
Concept proposal for an integrated Solidity testing and verification environment
Title
Aletheia: A Unified, AI-Augmented Verification Environment
Producer
??�M�i�c�r�o�s�o�f�t�?� �W�o�r�d� �2�0�1�3
/Title
Choosing a Solidity Testing Environment
/Author
AI Doc Maker
/Subject
Overview of frameworks, local simulators, browser IDEs, and public testnets
/Creator
??�M�i�c�r�o�s�o�f�t�?� �W�o�r�d� �2�0�1�3
/CreationDate
D:20261018190053-07'00'
/ModDate
D:20261018190053-07'00'
/Producer
??�M�i�c�r�o�s�o�f�t�?� �W�o�r�d� �2�0�1�3
/Title
Aletheia: A Unified, AI-Augmented Verification Environment
/Author
OpenAI
/Subject
Concept proposal for an integrated Solidity testing and verification environment
/Creator
??�M�i�c�r�o�s�o�f�t�?� �W�o�r�d� �2�0�1�3
/CreationDate
D:20261018190423-07'00'
/ModDate
D:20261018190423-07'00'
/Producer
??�M�i�c�r�o�s�o�f�t�?� �W�o�r�d� �2�0�1�3
Deobfuscated PowerShell UNKNWOWNmalicious
updatehuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell UNKNWOWNmalicious
$rukp huhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell UNKNWOWNmalicious
$encryhuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell UNKNWOWNmalicious
$encryhuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell UNKNWOWNmalicious
$rukp huhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell UNKNWOWNmalicious
$encryhuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell UNKNWOWNmalicious
$encryhuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell UNKNWOWNmalicious
$encryhuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell UNKNWOWNmalicious
$encryhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
0aa928627088f5789901d16cae62d5a8
Malicious
aletheia-unified-verification-environment-proposal.pdf.lnk
Malicious
PDF @0x000001C9
Malicious
[PowerShell Command]
Malicious
PDF @0x000060FA
#Stream obj 160 0
#Stream obj 159 0
#Stream obj 164 0
#Stream obj 156 0
#Stream obj 155 0
#Stream obj 163 0
#Stream obj 4 0
#Stream obj 29 0
#Stream obj 40 0
#Stream obj 167 0
LNK CommandLine
Malicious
[PowerShell Command]
Malicious
[PowerShell Command]
Malicious
[Lnk Summary]
Malicious
[PowerShell Command]
Malicious
[Base64-Block]
Malicious
[PowerShell Command]
Malicious
[Base64-Block]
Malicious
[Base64-Block]
Malicious
[PowerShell Command]
Malicious
published-solidity-testing-environments.pdf.lnk
Malicious
PDF @0x000001B3
Malicious
[PowerShell Command]
Malicious
PDF @0x000060D0
Text (Preview)
Page #1
#Stream obj 92 0
#Stream obj 91 0
#Stream obj 96 0
#Stream obj 4 0
#Stream obj 21 0
#Stream obj 32 0
#Stream obj 98 0
Structure
LNK CommandLine
Malicious
[PowerShell Command]
Malicious
[Base64-Block]
Malicious
[Base64-Block]
Malicious
[Base64-Block]
Malicious
[PowerShell Command]
Malicious
[Lnk Summary]
Malicious
[PowerShell Command]
Malicious
[PowerShell Command]
Malicious
No malware configuration was found at this point.
Deobfuscated PowerShell UNKNWOWNmalicious
updatehuhuhuhuhuhuhuhuhuhuhu
0aa928627088f5789901d16cae62d5a8 › aletheia-unified-verification-environment-proposal.pdf.lnk › [Lnk Summary] › [Base64-Block] › [PowerShell Command]
Deobfuscated PowerShell UNKNWOWNmalicious
$rukp huhuhuhuhuhuhuhuhuhuhu
0aa928627088f5789901d16cae62d5a8 › aletheia-unified-verification-environment-proposal.pdf.lnk › [Lnk Summary] › [Base64-Block] › [Base64-Block]
Deobfuscated PowerShell UNKNWOWNmalicious
$encryhuhuhuhuhuhuhuhuhuhuhu
0aa928627088f5789901d16cae62d5a8 › aletheia-unified-verification-environment-proposal.pdf.lnk › [Lnk Summary] › [Base64-Block] › [Base64-Block] › [Base64-Block]
Deobfuscated PowerShell UNKNWOWNmalicious
$encryhuhuhuhuhuhuhuhuhuhuhu
0aa928627088f5789901d16cae62d5a8 › aletheia-unified-verification-environment-proposal.pdf.lnk › [Lnk Summary] › [Base64-Block] › [Base64-Block] › [Base64-Block] › [Deobfuscated PS]
Deobfuscated PowerShell UNKNWOWNmalicious
$rukp huhuhuhuhuhuhuhuhuhuhu
0aa928627088f5789901d16cae62d5a8 › published-solidity-testing-environments.pdf.lnk › LNK CommandLine › [Base64-Block] › [Base64-Block]
Deobfuscated PowerShell UNKNWOWNmalicious
$encryhuhuhuhuhuhuhuhuhuhuhu
0aa928627088f5789901d16cae62d5a8 › aletheia-unified-verification-environment-proposal.pdf.lnk › [Lnk Summary] › [Base64-Block] › [Base64-Block] › [Base64-Block] › [Deobfuscated PS] › [Deobfuscated PS]
Deobfuscated PowerShell UNKNWOWNmalicious
$encryhuhuhuhuhuhuhuhuhuhuhu
0aa928627088f5789901d16cae62d5a8 › published-solidity-testing-environments.pdf.lnk › LNK CommandLine › [Base64-Block] › [Base64-Block] › [Base64-Block]
Deobfuscated PowerShell UNKNWOWNmalicious
$encryhuhuhuhuhuhuhuhuhuhuhu
0aa928627088f5789901d16cae62d5a8 › published-solidity-testing-environments.pdf.lnk › LNK CommandLine › [Base64-Block] › [Base64-Block] › [Base64-Block] › [Deobfuscated PS]
Deobfuscated PowerShell UNKNWOWNmalicious
$encryhuhuhuhuhuhuhuhuhuhuhu
0aa928627088f5789901d16cae62d5a8 › published-solidity-testing-environments.pdf.lnk › LNK CommandLine › [Base64-Block] › [Base64-Block] › [Base64-Block] › [Deobfuscated PS] › [Deobfuscated PS]
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙