Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 294451bea259b55a70d18887accbf1c9
Sha1 7a04155c49cf8081b8a194abe83443a68b35b3ae
Sha256 de3aa431b761a195fabb3311b67c7fc107105b6946adfd5e7fb2b7bdb71a6c29
Sha384 d92d6ff642c6ec0f50b9455d85500c5233995b0a715a7b8096797647eeb85ae72b390583d4e4f79b611fd107bdc1af23
Sha512 a6b143cd7983177c418d971b645638971c31a8f4c59c676a5b138a989ed52b9d71a7571bb67a590fff70fe4e8c80a6cbb3255368779108b69e804d523b7515a3
SSDeep 384:MGQF1k9y7thNLgHwLHumQuizY9Pqv6bARIqgB:MGQF1brJ4wLHZQuizSo6bAR+
TLSH E842C04DD0279052A76EC4BAB442AA712E1A5AC6FDD300D3AFE5CEDD9F53AC70701252
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1
bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd
Shape arc:zip>lnk>lnk:cmd
malicious 3 nodes
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
No malware configuration was found at this point.
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
294451bea259b55a70d18887accbf1c9 › IMG_20260724_165805.jpg.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙