Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 1a35bc533a74297729f4e822068c916e
Sha1 8ea51b9024f9101d8067fc2e41675a0d827be864
Sha256 043cdd7e96742564b0b063e14f389ff3e00485e2f57ee94b7f42997d19365519
Sha384 66960defee7b60e5beebba737c1a77ac2f6daff69f029d16287dafbad4ef90e4d01c19e480b0ec3ebc3a7c9308eb6212
Sha512 11192f194fe45b4518972e76711cdefb73406df9b65350deea689d371f6940076073688b0e6ce5be1ad7900ca5a9a686e0bd410c6dd4ee2c314f7fd157b32f6c
SSDeep 192:jnsmUTrbXQIwDuUPwXFmqEL3w9+X1L+iC1xgNIgRel2:D7aXV8um1k9m+cCgow
TLSH B5F1BF90563D49B2E1F1BFF6B0D392D9E1A0B2512F003C9E7A9D0B2C3109B9610E381E
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1
bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd
Shape arc:zip>lnk>lnk:cmd
malicious 3 nodes
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
No malware configuration was found at this point.
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
1a35bc533a74297729f4e822068c916e › IMG_20260727_132220.jpg.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙