Malicious
Malicious
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 336d861178e3bde015c91c1e87a59059
Sha1 4184e883c605936cb964c8ec6ca30fc20a38c110
Sha256 81254cfb6f4eee19aed87a2a5d526654455e911cee51665739d572f698dc97f5
Sha384 5a91a4871b4eeff03d5aa1b882a331052971bcf633ba9c061ec922b4a991a9c859cf64115f1f0e0a05647f3ce3499e6f
Sha512 d969934890ff624545808a0ae2cbbccb128d3d2291c004f7e0bd9c1f315ea1cd3ffbfb6b8aa3dabecce06090d98b72c9fe0e507d7f8382b951519e9cb57b064b
SSDeep 6:4xtisdS2ndS2nHolHKlFcnlj+SEEgykQLPfBMlpIoF6SaU/k1ARokJxt:8oUXx4QkCikQLhMbHFMf8
TLSH 55112B301BCB5A00F3F54B35BC3EB3012975BC0C8D314ADD928519AC0C26A109C35F36
336d861178e3bde015c91c1e87a59059
Malicious
LNK CommandLine
Malicious
[PowerShell Command]
Malicious
[Deobfuscated PS]
Malicious
[Lnk Summary]
Malicious
[PowerShell Command]
Malicious
[Deobfuscated PS]
Malicious
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd>scr:ps1~T1027~T1059.001
Shape lnk>lnk:cmd>scr:ps1
malicious 3 nodes
Path lnk~T1059.001~T1059.003~T1202~T1204.002>scr:ps1~T1027~T1059.001
Shape lnk>scr:ps1
malicious 2 nodes
LNK: Command Execution UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell UNKNWOWNmalicious
"iex(ihuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell UNKNWOWNmalicious
Invokehuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
336d861178e3bde015c91c1e87a59059
Malicious
LNK CommandLine
Malicious
[PowerShell Command]
Malicious
[Deobfuscated PS]
Malicious
[Lnk Summary]
Malicious
[PowerShell Command]
Malicious
[Deobfuscated PS]
Malicious
No malware configuration was found at this point.
LNK: Command Execution UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
336d861178e3bde015c91c1e87a59059
Deobfuscated PowerShell UNKNWOWNmalicious
"iex(ihuhuhuhuhuhuhuhuhuhuhu
336d861178e3bde015c91c1e87a59059 › [Lnk Summary] › [PowerShell Command]
Deobfuscated PowerShell UNKNWOWNmalicious
Invokehuhuhuhuhuhuhuhuhuhuhu
336d861178e3bde015c91c1e87a59059 › LNK CommandLine › [PowerShell Command]
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙