Malicious
Malicious
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 1c709f7f33460ae149bb042b3559c49b
Sha1 d214ab4901d81907b8034dbe7632e9268d531b2d
Sha256 da50eb6030b8760f13c2e1fbd9d325b15f06e5c6f015b38c2c2ffde870b7ac0c
Sha384 79134e6b4c5f106139f8f779dd634f9341393c5f7feabd6082f86d8d1c7c3530daa3cb381a037d53b976c8ab52a6b341
Sha512 0eb8835692b5b43a2f107948788aac85600155de619929f945cd12a9bbeb22ad9fccd6621d1a63d1576cf08cd7ce913c601c8e0dc568ee4f2d20bf79fd72c2a5
SSDeep 48:88Ggh3H2/XBvSSXtrSEdWSLkRTg0Xi2fjjCZaYwmYXuj:88BX2/RsEdW5W2PCZafm6uj
TLSH A851B219A99A648CF9FF50B125FCBB5091B638CE67891BE1407CB658E3D2BC84CC41EC
1c709f7f33460ae149bb042b3559c49b
Malicious
LNK CommandLine
Malicious
[PowerShell Command]
Malicious
[Deobfuscated PS]
Malicious
[Deobfuscated PS]
Malicious
[Lnk Summary]
Malicious
[PowerShell Command]
Malicious
[Deobfuscated PS]
Malicious
[Deobfuscated PS]
Malicious
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
3 / 3
Path lnk~T1027~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd~T1027~T1059.001>scr:ps1~T1027~T1059.001
Shape lnk>lnk:cmd>scr:ps1
malicious 3 nodes
Path lnk~T1027~T1059.001~T1059.003~T1202~T1204.002>scr:ps1~T1027~T1059.001
Shape lnk>scr:ps1
malicious 2 nodes
1c709f7f33460ae149bb042b3559c49b
Malicious
LNK CommandLine
Malicious
[PowerShell Command]
Malicious
[Deobfuscated PS]
Malicious
[Deobfuscated PS]
Malicious
[Lnk Summary]
Malicious
[PowerShell Command]
Malicious
[Deobfuscated PS]
Malicious
[Deobfuscated PS]
Malicious
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙