Malicious
Malicious
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 363085acc44b9d21f54619c8cd2359ec
Sha1 335f8618074230796bcdd6d1236e7c228b6d9f6a
Sha256 ea867c92a10c8bb4d0121b06aa4bcfe05fa0e82f91077ad97b32141743523a87
Sha384 cff49be73d9c7179ec30c5c0ae12965db9e3ae5c022aa3be9a33355a49c6501dce6a848566c3bab5aaf3918b902d59b4
Sha512 b247eb6714b07f4828175299a6b0a5db1f30ab27d2f24a3f8cab3de188bf648be4a328507b3348787b089a4e4dcfb174821d0f4ff8157c11c122270b213c6132
SSDeep 24:9MPdt1z9a6teX7kFn3AcNleCFJoQ4Hnmklx11zMWgzG4R5:9ydLz9aSeXmlewJo7nTZ1zMvr5
TLSH 9721B4B1E80D8F19FBF7A635BE285F82349421060DAB02A92C31E2C21D5E0CE1757AB5
363085acc44b9d21f54619c8cd2359ec
Malicious
photov_459199670625.lnk
Malicious
LNK CommandLine
Malicious
[PowerShell Command]
Malicious
[Deobfuscated PS]
Malicious
[Lnk Summary]
Malicious
videoa_274084603461.mp4
[Lnk Summary]
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd>scr:ps1~T1027~T1059.001
Shape arc:zip>lnk>lnk:cmd>scr:ps1
malicious 4 nodes
Path arc:zip>lnk
Shape arc:zip>lnk
2 nodes
LNK: Command Execution UNKNWOWNmalicious
%COMSPhuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell UNKNWOWNmalicious
$eals0huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
363085acc44b9d21f54619c8cd2359ec
Malicious
photov_459199670625.lnk
Malicious
LNK CommandLine
Malicious
[PowerShell Command]
Malicious
[Deobfuscated PS]
Malicious
[Lnk Summary]
Malicious
videoa_274084603461.mp4
[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution UNKNWOWNmalicious
%COMSPhuhuhuhuhuhuhuhuhuhuhu
363085acc44b9d21f54619c8cd2359ec › photov_459199670625.lnk
Deobfuscated PowerShell UNKNWOWNmalicious
$eals0huhuhuhuhuhuhuhuhuhuhu
363085acc44b9d21f54619c8cd2359ec › photov_459199670625.lnk › LNK CommandLine › [PowerShell Command]
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙