Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 633e837cde520a59ab3802357cf1b9c4
Sha1 a1e3ca468b47f3bbefbe21b9fd431a2f585fae35
Sha256 64dfa6d3e4d3ef8783ac2f57fce3848d0754528bcaacd6565638693f07f02376
Sha384 86da694b504dca109464cdb7bea35c11b13045bb0586ea0d0d3514d6c5ef7b981d0e24338a5fe4cfb83f2e79fd60516a
Sha512 7c460fe941f865ad5402d96a0f6b441768613b4f0705482d393d55f632efc08bd713d257a36b93ed83ba9a5bb2e3caec6888b1246beaeb57135d5dcb164694bd
SSDeep 96:DqT26ggZFcdT6TjMfP9Ue0L8/DXDxxecRSdS18WP8jNaESO4:M2eZk6T29904rauz111ESd
TLSH 05C1AF64117F0AEBC1E39DBA118E775DD5804AC9DBE0DA5B3AD1748F6C083C811BC264
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1
bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd
Shape arc:zip>lnk>lnk:cmd
malicious 3 nodes
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
No malware configuration was found at this point.
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
633e837cde520a59ab3802357cf1b9c4 › IMG_20260725_052634.jpg.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙