Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 506be0f3446082df2fe9976758a50804
Sha1 349d49f273f9e795a32eacf19a206cf109e6ea5f
Sha256 ee40cb76cede7138b7302f11c739fe28f8833381caadd3b7c256ac92d874c25e
Sha384 a1e9b44de86cf4637a2c334a45b5886fc9f05af1b0d2d534a0f1425e2506cdf51508726133c092286519a78d31dc442d
Sha512 0f92caa9905d797a22123f936e6805360ae277181d2de9e40438b30738e847badcba79356da7f9575e4e7dae53485821e94333080439cb44bc435a80379a1171
SSDeep 48:9ap09D4rrUWJuuk0E2qHdkaK8GdgUk0QNrOx2D4L/Ri:k44rrUguukzh+aKFdgUr2kM
TLSH A531F886DE6FBF02F11332318A549C4A3F1821CD89E7CAB9600D57AC36823B20401535
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1
bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd
Shape arc:zip>lnk>lnk:cmd
malicious 3 nodes
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
No malware configuration was found at this point.
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
506be0f3446082df2fe9976758a50804 › IMG_20260724_193641.jpg.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙