Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 0f3ab74140d67bcf4c4f45d8dcaf283b
Sha1 3ff4b3f6b4d88acfa3f5e18d56a72286bc612cb3
Sha256 9e2f96680c4c9a204d5ea9bf390f2fe4d4aa4e9ba23ce7641c1a8f19326168b1
Sha384 0ef4b22eb2bf385c93db5b01b56027b41c252ca3a54262ec88825cbcb673a274c5386a93031e0aedfa27ed2aefb7d9a5
Sha512 53f20982fdefecaf97cf0baa25425e068153ec873ba4b44fbf4f62fd89872939eb45ba493c250df71dad4c2a4e38e59924017c60a37aeac5431524bcb0bc281e
SSDeep 96:qcnkBJQJueVfzbMeUPbrWPe3zNYG/RU4mBd96hJd07jps:qcnkrQJueVuj/Rdm96hJcjG
TLSH 08917D9EE00D08DFE40E92B49C93DB7AD7219BA21972C1E6050B9A6E013099EAD4354D
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1
bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd
Shape arc:zip>lnk>lnk:cmd
malicious 3 nodes
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
No malware configuration was found at this point.
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
0f3ab74140d67bcf4c4f45d8dcaf283b › IMG_20260725_102046.jpg.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙