Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 6eeda6bc4f2b4732ce7f84970b7a444e
Sha1 ef823e5d06a35737b53420ead8874e25c1beb29f
Sha256 0049f68018f501e28ac8bd7d2f60f1a1fd2cdca995b6b615c21c6deb1e68d407
Sha384 43ef82079c4cc85508be852355ccf5670e131f191b53d937a6e45b085d7b0fbf89de12b4dc3ddda4351d33b7c3031287
Sha512 ab57648d22f296c9fd14a7362c4e080ed5fee23ebc79dab04242b09727571381aac2f50d9ae1d3180cc2c2acf20809a10a42adebaf4180f17c4a56fd1f3904a0
SSDeep 96:zxAlTOKInqh1KR9Xvg4ob5pslEQfz1u3dSA3:zMOBY1KRVvglbxGA3gs
TLSH EAA16DC5C8EC7D5BC1B756F530A80DBFAA1C0D6756A95B0EB860E64A080578FF950097
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1
bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd
Shape arc:zip>lnk>lnk:cmd
malicious 3 nodes
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
No malware configuration was found at this point.
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
6eeda6bc4f2b4732ce7f84970b7a444e › IMG_20260724_150929.jpg.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙