Malicious
Malicious
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 5702711dbfe48421e9643c300480ddd9
Sha1 3f9e9237b59eb5b1918d040599e3cd22fc4ae8a7
Sha256 89c007edca81ba4cdbeb5e3301e0a1653a35f3387ec2a753e85f07458206c17f
Sha384 014a47a673f547b1ccc0e64beab62a35654feebb9f92ac2ef13df7fa9d732bdcc9ed855b411c87037ef39c0b2506a209
Sha512 b2910661bc55caa2ae19abaf36d90b501f78ea8a08803e56ade886664028b4575729338ea4b2efc96a9b666eb4ddf2a2d0120a08ebf70393b9be61424f50cd51
SSDeep 24:8pdmGjMDvSwjKUaWU3AcPWkp+/CWtGwvdbr4I0WK6c/6Cab7Oa7m:8jmeKpUQlnvhUIA6q6Cax
TLSH 8921B1211BF20369D6BB8B3568B6631187327E0ADB55CF9F13D092949964221F468F3B
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd
Shape lnk>lnk:cmd
malicious 2 nodes
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
No malware configuration was found at this point.
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
5702711dbfe48421e9643c300480ddd9
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙