Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 5b95d4ace98d1e8d9842d227853fd1a3
Sha1 7f8042c074652b7883db18be1f4457e9eb88068e
Sha256 3ce964f9eec94a735525e9308ae83b1b8e902c4610c8447fee62f0602aff8859
Sha384 34f133fedb42c1f97cecaf70ff8f64d83560fe03938c40c642e5a79b5a036ea3fccd5beb2e51d695dadeca2113dcdaa9
Sha512 573c499f25ee180957079ac7a8d47f8dca2e48ea1f193b6d51d471a2f3633d1751c76c328709ee4c5edd11498a89bd66eded91e59277e5e4ec8df22ad8681867
SSDeep 192:A6qWWqYkJf/3sa0B1f4a26l6W6W/cwzbA9XkGl5fETYZknMVyXf7uXsV+GqfIysF:3qWZYkJf/sa0z4a2c6G/hcx3cTYZkM21
TLSH 5922C09C5F991A4FEE6580B5B44621065F9C113C8E0BAC59DAC266DC5E27B0A4CBC0F1
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1
bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd
Shape arc:zip>lnk>lnk:cmd
malicious 3 nodes
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
No malware configuration was found at this point.
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
5b95d4ace98d1e8d9842d227853fd1a3 › IMG_20260725_063318.jpg.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙