Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 0d5d6f8df4ae57d92bf4dd4971620920
Sha1 2eb514bde1859e7543e8a1f02acf6a2f75f125aa
Sha256 9340d9c33d5a96602e2270e3892a3b03ffb908879acbdec69c50421990d11d93
Sha384 6e1eb6ca9bc53c01912ff8d1c71b5859d5f905483505aef2a423c843028f0340150e75f94a996d58b7729301030eefd7
Sha512 a39aa1f8f3baf6b796f02642fb92d059a5a08aed0afc738d7af7a0f91366f87576a9d6127d92f5b874e9ba4dc96b6536dc47d270d9117706db70109fe4e593e7
SSDeep 48:97Y9DnuZ9EoG4hdem2/002W2vV1/AWsD9MwE5jX:YDuEb+E/M1/A0T
TLSH 5D512EB40C977462C7E387F7B1974E88563828531DD91505E35EA1485DD57A773033F4
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1
bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd
Shape arc:zip>lnk>lnk:cmd
malicious 3 nodes
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
No malware configuration was found at this point.
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
0d5d6f8df4ae57d92bf4dd4971620920 › IMG_20260724_224151.jpg.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙