Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 0b60f49b6b703a4609e4c45d7ee31b1e
Sha1 608a0b39570338d377cfbe6cc6ca72db9c0ab3c7
Sha256 b192845b5838888510d7f50a2639f035c5229f6795faefcac84cb5c3202df9f0
Sha384 4f9155c32947c9cd9da4e481d95bfe538631913581a658ebca759eaa277ddbdc796cfc259f4ea3fbca38250fa588b161
Sha512 75d227eaa07620cd2511d2490d8f7f394ae11153affae007e48cc40b61f48d77b63ef865207d51c168794aaf59334aa428c281b45700431e1dd06217e8d9e5ab
SSDeep 96:HOgeupAgDjphCNdZAu/+9E7rgZkbyZM/KgdO+pXh1TNu2OF:uRuG4zCNdZmorQkbjjhBofF
TLSH 17615CA902118D5EC5D6303E70861215F87EAB0A02E4B1726CE7C3EC765A128B85DFDD
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1
bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd
Shape arc:zip>lnk>lnk:cmd
malicious 3 nodes
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
No malware configuration was found at this point.
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
0b60f49b6b703a4609e4c45d7ee31b1e › IMG_20260728_073521.jpg.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙