Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 383367683448af5af4b5e81f624c5c69
Sha1 0b1aed96a0e5f2c662d90913c18e817ee487f0a8
Sha256 3f63c7a6730c3669e18ab8db28a07613a6a785787dcd7b302ac3cbce8e0711a3
Sha384 cf321dfe37722938cceea1ff1796be0c0c3de693eeaef3106e51abda4f2965ba53539dd07d7802b9f29f713b3c5f11d3
Sha512 c0777ba0761852bca14f5af13588be6bf3c984192deda8c2a30b44e7310e6a55c45575c9103f6c062367e33e2b4883c3f07175f4d938f43adf7d797bf86a9edb
SSDeep 192:15w6siZsvHzxfUOjs5r0aM7dvPzWuxZIEk72WJKyqP+eCrgnl2ik6r0/hIUInZv+:1N7uflTs5r0ndWuUvJBqPVCGrOOZ+9
TLSH 2652C0FE1B297E0FA1CFCA34F54D2F250A125D7696050A90B3D32CEE363F5A31226964
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1
bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd
Shape arc:zip>lnk>lnk:cmd
malicious 3 nodes
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
No malware configuration was found at this point.
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
383367683448af5af4b5e81f624c5c69 › IMG_20260725_031406.jpg.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙