Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 1b2da206f8a65590fa2c375cbd1273b3
Sha1 b2dc6fa86d0ebaa3d9d65286c73d4324099b48a6
Sha256 c79491ff70b8c838809be8271c277fa28f63dbbb68752099814e1d48a208dff6
Sha384 ad3c104bd76dbe8249aa77bd42a9e74315480aa675300c8285e9d8def82dc13f0d91a5b191c7487fb58bcae66f2fc112
Sha512 2ca084504ade7aca1533b882b7863db3f593f65f725b3990f9da083310c30eeee88390f066f79909700f3ffe4eed1aa20d1bf96a64a28724d15f3b51f2900120
SSDeep 96:DUb8P5W0jhIGXmy6SB7T7CQqxf2lOjEM6/hHtBejKI:4bi8yI9Mx7KmSEMmHHejKI
TLSH 8C715C56DC31C052EE5BDA389EEC1E1E14D1A3CF21490C0BD259097B22A5AED72311AA
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1
bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd
Shape arc:zip>lnk>lnk:cmd
malicious 3 nodes
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
No malware configuration was found at this point.
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
1b2da206f8a65590fa2c375cbd1273b3 › IMG_20260724_213958.jpg.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙