Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 63c4b5ef8f777b2db827cad9b9d22a23
Sha1 16f33de0e51872e32c5fa5345b11141b46499292
Sha256 ff1d42c0674595a0d48f6ece5edf4f974985b354e1dcfe72814a04e176dc3685
Sha384 48beba9d62dcdd7f1dbeac9d1f6b21ce4436422f24a703b204744ac7fd4779ddde7ea771de0997696abdc00155f48370
Sha512 58d70cc9f3b10ee5bb2358ae9bf3fae6bfb8bfad37457d1c1b710d080f16423337cedf4ccad1bb7eef301e11f59c4244fcf7ec045b5a4be082f431d1e259a753
SSDeep 384:Qf6MFiE4gSCvfDxjrUXvlvOWLRLxy66Ly:Aj8GSyxjQXdvbLjR/
TLSH 5542AF76041E49F4AABA97F1B89F2CD83EF37F01A4184713B91E0EC7113A81293621BC
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1
bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd
Shape arc:zip>lnk>lnk:cmd
malicious 3 nodes
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
No malware configuration was found at this point.
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
63c4b5ef8f777b2db827cad9b9d22a23 › IMG_20260724_193927.jpg.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙