Malicious
Malicious
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 3ddac85823f09daec535473e4b90a84f
Sha1 bb117baab43309e6e3b1c6dcd68be7ec8ca1a811
Sha256 7f293125197fd3fd25eb74ae27da564a32dc2b8b0ac4ec9d522a630c528f35a9
Sha384 6dd71ef1ace01cc189865cb70f8bbe452958f9723c417215ddbb1de7c057f29cdcd6abc0448c4c7f985a0c5034bf45b6
Sha512 094743de7d1b1b46e2d00a9a7741ea56964a05cd4997471635c4878f20588535791f0f98b9efb63b6bf8c9d8d2332a82317398c531bf34fdcda8486262091942
SSDeep 12:5jy2O/Kt2NG01/zNks/0vcaDypfb6vBVEh83rzh3mK/kPy1Oiz0TTeJpHoy2O/K9:9WKt2NG01/zNeEfb6vB6hu0K/ImGGHJq
TLSH 19F041E852C1CF85EDE3AD7870B15E810204CAF2EF49E1ABA94B34A03B175C1684B161
3ddac85823f09daec535473e4b90a84f
Malicious
IMG_20260722_195253_472.lnk
Malicious
LNK CommandLine
Malicious
[PowerShell Command]
Malicious
[Deobfuscated PS]
Malicious
[Lnk Summary]
Malicious
[PowerShell Command]
Malicious
[Deobfuscated PS]
Malicious
video-8146467233792.mp4
[Lnk Summary]
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
3 / 3
Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd>scr:ps1~T1027~T1059.001
Shape arc:zip>lnk>lnk:cmd>scr:ps1
malicious 4 nodes
Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>scr:ps1~T1027~T1059.001
Shape arc:zip>lnk>scr:ps1
malicious 3 nodes
LNK: Command Execution UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell UNKNWOWNmalicious
"iex(ihuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell UNKNWOWNmalicious
Invokehuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
3ddac85823f09daec535473e4b90a84f
Malicious
IMG_20260722_195253_472.lnk
Malicious
LNK CommandLine
Malicious
[PowerShell Command]
Malicious
[Deobfuscated PS]
Malicious
[Lnk Summary]
Malicious
[PowerShell Command]
Malicious
[Deobfuscated PS]
Malicious
video-8146467233792.mp4
[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
3ddac85823f09daec535473e4b90a84f › IMG_20260722_195253_472.lnk
Deobfuscated PowerShell UNKNWOWNmalicious
"iex(ihuhuhuhuhuhuhuhuhuhuhu
3ddac85823f09daec535473e4b90a84f › IMG_20260722_195253_472.lnk › [Lnk Summary] › [PowerShell Command]
Deobfuscated PowerShell UNKNWOWNmalicious
Invokehuhuhuhuhuhuhuhuhuhuhu
3ddac85823f09daec535473e4b90a84f › IMG_20260722_195253_472.lnk › LNK CommandLine › [PowerShell Command]
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙