Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 24e823fbde23818f172a4b9f49267518
Sha1 5713482597066e8aaa664c419ad3a34c587e024c
Sha256 4caae0f550da1fafcaf4aadcbefc71faf6ce44ee40cd7f8e1a95eaf7f3b5e61d
Sha384 13dbf33da72d1bd26239da73241e4606203ed770f7c38403aa912d7b6805bf27e62235e3ae2a73ddcf596a90117f4646
Sha512 b21fafd7be118f5cb6e86a6f4eef460207edacf3ea1215522487e45cad7e1c940cc29e4021e42914d261c5eef5c41a9dd4a771011e1708e3d35f21f1fbaca3c9
SSDeep 192:g880tz4hZNkbIKIh3gff62aDkRGWl3XXmNAFugMPg7UqtubPQgWAEaDgHOEq:gLym9k6jD07GF1DbDNELHOp
TLSH C852CF51B31674DD5E6E70EEE37E9A24949323C67088CE19BB40463E46183D4370B9DB
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1
bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd
Shape arc:zip>lnk>lnk:cmd
malicious 3 nodes
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
No malware configuration was found at this point.
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
24e823fbde23818f172a4b9f49267518 › IMG_20260725_091429.jpg.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙