Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 6b3825494cebd2298a760d8794c9b3d5
Sha1 8f5107f1ee03835953a8ec0e0ad2b2e35e3ca4ef
Sha256 dfada820a845dafadec60311eb8914d712f08d8fcf18074aa1d4764285207db0
Sha384 9157ac22aeae710111005233fb9f7a586193375a9a08069b5e549880be00a66c1b9dc3d20a97957cc6005ab48e826843
Sha512 850f3730b0240cbf6c8c18eec0d355e76a805de5199f24b3671a5609f5358110dc71787b828025516c4f269ab6a4e8e674f8e21cbd11c7797a47a584b3069e81
SSDeep 384:vy/bJNg5Q/n41tFRPpJNJ3I6Cz5GNFm0b5FcQMoSWQ:vyk5Q/n41tPPLNJ3FwgFLM
TLSH 3672D10E916BA71FDBE226F4FFFE96D81304D336C80069D5867C04DADE13226E89590A
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1
bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd
Shape arc:zip>lnk>lnk:cmd
malicious 3 nodes
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
No malware configuration was found at this point.
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
6b3825494cebd2298a760d8794c9b3d5 › IMG_20260724_140531.jpg.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙