Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 4423e4bc41296be430189b8480eb211b
Sha1 c80adf801e84801efbe7e69f2a193f3efc270608
Sha256 c91e148c225842770c00dcf8c088837e91c81e0bc76d7c641e1ef3ab7830db11
Sha384 b61fddafffb643df812b1a25733c22c813f22991cd08b91a8a3c6401bfd591e5e61ba3faf524d1d840b6fe88cb0e9a7b
Sha512 38069bccc8e3294a9f80c926c409e26a88b590458865c63b47d413e29aaebaac4ed4b8f58924a4a18df02cd2b552030786a9594b4e1167f81104c8792bfb641a
SSDeep 192:SQtPtQKvXnhcsc/v0rCAJK/zMmRn8/moejzdVRLzHfewVUWOVtsQ0L8:1lQKvav0rtirnjljRX/G8UZ
TLSH BC22BE002A8FB5238C0FE235B2C9748EA636041FEB7C9533227BA4884759CA24CC378C
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1
bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd
Shape arc:zip>lnk>lnk:cmd
malicious 3 nodes
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
No malware configuration was found at this point.
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
4423e4bc41296be430189b8480eb211b › IMG_20260725_101347.jpg.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙