Malicious
Malicious
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 185b647e31562926eb8548175c1f0425
Sha1 8b930c053898bd01bd02abdce29c698666705872
Sha256 c8756ea3af938d0c6d6940850b12d23963e1e417aae0aa15c2fcb13390974995
Sha384 1934bf1e64944f52a46d88318dd6c3dd34c5bbf78e72fe4549a922079884d0ee74ddfdaf97c72e3c080b9bd3f9b0f86b
Sha512 19598e2e858bcbd85b867da72caacf7fbfc0abd18b6f09929d0b95d5fdbf90547106445aefa8451e5e87a39d254e5ba3f878371f0ff22f79025061eea0f82480
SSDeep 24:9IR7O8P6tIXJSfPYzrUWBcsoNc2jQ8APmclSdRI4OJX:9I93POIXJSuTBcso7nozlqK4u
TLSH FA2106B8EA08461CE42B20B10993CC5C46A4BB0A90AFD03DFF022C93CBB4788221CA40
185b647e31562926eb8548175c1f0425
Malicious
File_7ae005b5-f714-487f-bba5-360f6d3fd385.lnk
Malicious
LNK CommandLine
Malicious
[Deobfuscated PS]
Malicious
[Lnk Summary]
Malicious
[Deobfuscated PS]
Malicious
[Deobfuscated PS]
Malicious
[Base64-Block]
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>lnk~T1027~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd~T1027~T1059.001
Shape arc:zip>lnk>lnk:cmd
malicious 3 nodes
Path arc:zip>lnk~T1027~T1059.001~T1059.003~T1202~T1204.002>scr:ps1~T1027~T1059.001
Shape arc:zip>lnk>scr:ps1
malicious 3 nodes
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell UNKNWOWNmalicious
-noprohuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
185b647e31562926eb8548175c1f0425
Malicious
File_7ae005b5-f714-487f-bba5-360f6d3fd385.lnk
Malicious
LNK CommandLine
Malicious
[Deobfuscated PS]
Malicious
[Lnk Summary]
Malicious
[Deobfuscated PS]
Malicious
[Deobfuscated PS]
Malicious
[Base64-Block]
No malware configuration was found at this point.
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
185b647e31562926eb8548175c1f0425 › File_7ae005b5-f714-487f-bba5-360f6d3fd385.lnk
Deobfuscated PowerShell UNKNWOWNmalicious
-noprohuhuhuhuhuhuhuhuhuhuhu
185b647e31562926eb8548175c1f0425 › File_7ae005b5-f714-487f-bba5-360f6d3fd385.lnk › LNK CommandLine
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙