Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 5aa3d69f2e3ab5407b1fcfd4068e85bd
Sha1 9f915e038293fad5972550e143bd1dcbd988cb4e
Sha256 1baefd3c77bcaecf5ec30840552844f9eb3988e685c0d8a6c6290cd5d8ff7c37
Sha384 2ca7fe3d2cdc08cf925c654d734ec231d33619de2d5d83deaa21ca846983eff3b933ea945340719355c34d77101265a8
Sha512 3a5dd417758fa55ecd7a146813afdd159465a3261e11ee5f376f9c1516413957ed9e7106544fb01ab20c0b5fab947829a338857741d7343c98767970ab812629
SSDeep 192:SB7dPVm7QIOZ/cklCLLND6ZetI9O9g4e4JxvDs02XnzLpB2Qkt6ui5292:kJt0rAKAetI4Q4JS0OnvPrdc92
TLSH 4912A0D14B160F9E6C099A7304CB2D885108AAF0371B6F703632A17C99A3547A74FFA5
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1
bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd
Shape arc:zip>lnk>lnk:cmd
malicious 3 nodes
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
No malware configuration was found at this point.
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
5aa3d69f2e3ab5407b1fcfd4068e85bd › IMG_20260724_143245.jpg.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙