Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 5610d3d379019cdc1c95840d6870a86e
Sha1 c70a97e10cd129bd6c6ca3245c5265398b76776c
Sha256 92589172ef4b160bfe6a56ecf224d6be7c1c259923b9afc779a6ebf3f11400d8
Sha384 29e7a242cf48585b4dca3b06614a3af867055593cbe02b3e361716f935d7328829fb6ac7a22096f1308f7c79527f6c1a
Sha512 33717f9eb087a923681c811e81bdd7f56ab93cc11ef341c6c281fb165bc62decdfb8af4b11cc3dc9cc1fe1018b5988e4c8d4523781dbbaae44c041a643e79ed9
SSDeep 768:3uwKcq8QVFOgwBsTcKB4d5+MM7ib12BrsFBv7D+ope/O+w4SrGJ1tq:3Jq8QVFV4sT65+MM+b1ayx7DdpV2SrKu
TLSH 0E03E1DF9A907383199DE2F3500BE49AD0EC1502C5D3E4DF725FC8946669831A1712AF
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
7 / 7
Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002~T1218>oox:docx>img>img
Shape arc:zip>lnk>oox:docx>img>img
malicious 5 nodes
Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002~T1218>oox:docx>oox:metadata
Shape arc:zip>lnk>oox:docx>oox:metadata
malicious 4 nodes
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
No malware configuration was found at this point.
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
5610d3d379019cdc1c95840d6870a86e › questions for collaboration.docx.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙