Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 29da3a03e08140107d97e46652b07562
Sha1 2c3611c92dd61187dd7354d0d02a8438f50ea62b
Sha256 33ec22b77b624b500380a9acc2e36af26760755ac66e15838650241bed3f9b9d
Sha384 ebad23f2d921bc2303a236e6819c165c406207fb24394fcfbf26c7a8f55d62d8ea7b71eecae64f507d8b4d21dcb43a04
Sha512 aca1a272fd9450ced1b02ed1642b6e9844c06a03d04b6d55dbebf2810abc03adaf4f95a099a9c61142f40cf3e8de1793899b6c5d03d84d1828e4d5f69f1f9f0b
SSDeep 48:86Hagphlez7XkC8wVFUyAWBqJH7C+eF63AIZag7P:86H5knD8wfAY4H7C+J3A2Z7
TLSH 27514B1117EA0304E6B3AF3AEEFBA24595377925FA32CF8E0050518E1271510E5A7F2B
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path lnk~T1059.001~T1059.003~T1105~T1202~T1204.002~T1218>lnk:cmd~T1059.001~T1105>scr:ps1~T1059.001~T1105
Shape lnk>lnk:cmd>scr:ps1
malicious 3 nodes
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
No malware configuration was found at this point.
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
29da3a03e08140107d97e46652b07562
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙