Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 252752c896cde26990f95f0e2434d1da
Sha1 eaf7ee2fca4d40207080c3e95d866c6c2c0db90b
Sha256 2fda2d186f0f2d0204987eabc74207f77f2c3b9a9a9b2a5c7edfcf3c04529c65
Sha384 90835cd0add48e6e35872339a225662d0083900ba5149d7b65dcaa1bb730578cb97733f8083cb96e128c98a018468d5a
Sha512 cc99a3da1334d5a48cb293a8c0655bba016a40c8817b39f5ef00ae9cba6f0161d49792de06c05d00052558012a9c7bd432c79be411877f5a7cada6ba079c909d
SSDeep 96:gRCCnUWpiaEkLP0HIHBeP0I2A+rSZHHKt0CuzCWINadlfN2RGJN:gwCtsRgK/1HKt0Cuz5IifN4GH
TLSH 11815BFC712DCCD3DE53DCF0A74E1997A64798E4208A0824CB782CFA56C7968161BA53
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1
bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd
Shape arc:zip>lnk>lnk:cmd
malicious 3 nodes
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
No malware configuration was found at this point.
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
252752c896cde26990f95f0e2434d1da › IMG_20260724_201342.jpg.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙