Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 2ca43ae1643ea8f07367903e44f3030b
Sha1 5692d70177ffe1f2a4bb73a985f8f0062776a58b
Sha256 778bd8665b979fedddfacb85baec56db4688c691b92fa1cc63fd4e38a07d927d
Sha384 4ec485c9b61e62557561638b1a257e23910dcff009a95a31ba9e4f17b561939b915708780eea89d6bd0fff66c5b8200c
Sha512 9a8b08de041a1a4f9cccfdb7d79a0f08eebcaa4d9f4704be4f4f0c7685b57239768165b94b48523630415a6e3f7cbde3a8b1ec5b30aa3dfdfb948e0556d0db09
SSDeep 384:V8B36G8o1cfPOj1y1xIV3oUvkJCiCkZOjpJ78qFQ:V8B3Qscno8kV3oUgCKsjpJ78q2
TLSH 6572E03E37614EA7FA596360011F270596A6FFDF456630ECB4BF226EC8225388984819
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1
bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd
Shape arc:zip>lnk>lnk:cmd
malicious 3 nodes
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
No malware configuration was found at this point.
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
2ca43ae1643ea8f07367903e44f3030b › IMG_20260730_080535.jpg.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙