Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 2741144605158b41ba1981c43dd318c2
Sha1 ecc45418d5c39277531082b2cf641313863f70da
Sha256 c048a593b64283dcded4ad7b0ca69e8510c2f969576c40e04058dc949089ce9b
Sha384 1a5dd900c50288b8d1c3fcc21b2a7d865c2a5d0e5b5a2a9ea3235d2865283336a664a7d86b03ddd161eb000aec2d0593
Sha512 a0ae461d5e16149aff41aa116c41292a48c6afd5cc8ae79fb501e6966a50d1fdb397d5b3844f2e14289097b972dad80c5c37368e6e3ce9facc3bb59787fc8bd7
SSDeep 96:dTEHoYoInBTz6vgvK00US04kxD0+phIy8307IcezOMKhltH+6:d4gIwvgvK00US03xD0xTydSOJ+6
TLSH 04917D8F6E1F2123DCA765B4ED4F4F65875065C15BBD820A3C27C1D8883E5A22A4A34B
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1
bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd
Shape arc:zip>lnk>lnk:cmd
malicious 3 nodes
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
No malware configuration was found at this point.
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
2741144605158b41ba1981c43dd318c2 › IMG_20260729_053147.jpg.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙