Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 1f4ee8c608e7fc470461d6842a4cdceb
Sha1 66b89218a2bafcc4401d252e5d20c793f1c0a773
Sha256 d2fe8c1b6e848bed7fa919fc7a3fa9ad2fbe7aa77b8066f523e99752f794306b
Sha384 9ea090d75bac9c0e11cadd95a042b8bc494c380a2f8958876de9c90c0f9f88370267daeac39aaed9788fa34280f4f453
Sha512 e9cce1829e6de35fb483435f5d0c377452f0c4d48725147a75a4a7731ab61dba63578bd7b6ca8a5593a6b0041f84206222f84bdc5db441f705d8a48cddd6017e
SSDeep 384:HqnW1xJu3J5xbh8psqyVevQMOl2DMTnNV+kM5:eW3UfxbGpgl2YTnf+kM5
TLSH FF52D0D3981329FAC677413931778059E2ADF1717F88655E84F2913C503B4A330EE765
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1
bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd
Shape arc:zip>lnk>lnk:cmd
malicious 3 nodes
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
No malware configuration was found at this point.
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
1f4ee8c608e7fc470461d6842a4cdceb › IMG_20260725_055818.jpg.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙