Malicious
Malicious
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 76d50b197ae5d74345b45bce41c64f4b
Sha1 c41959a28cb6a96937d2ba62ca89c4666152229b
Sha256 0bf9c8427a60d343df0edd640f2e6e6ac40b02a937f99156e60baa75e87a7421
Sha384 7ab97bc6fc0cf6c4962f1bcbc68797f6c3ae0ab92769bca3352d9d257850efe031332318475ba9bea9e34a472ae2bbef
Sha512 6656cb9063dec0929f497762d1a94d94f2487fa3ef13d24c205672110b25ef1cab7dd8fa2fc3bc1cca6ab1c138f237b6e3f98df5eaa6b7daf117c5b7f278ec36
SSDeep 24:9K3eMxMErGEJGE8hYiavaEK4z1KliIomBeCkg:9nOtYthrav3Bz1WMCkg
TLSH EC112192020E2423D94787FE034F205CC2B105953B22928AA97B5292D98F9961372D8E
76d50b197ae5d74345b45bce41c64f4b
Malicious
PIC0402023
Malicious
PIC0402023.jpg.lnk
Malicious
LNK CommandLine
Malicious
[PowerShell Command]
Malicious
[Deobfuscated PS]
Malicious
[Lnk Summary]
Malicious
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd>scr:ps1~T1027~T1059.001~T1105
Shape arc:zip>lnk>lnk:cmd>scr:ps1
malicious 4 nodes
LNK: Command Execution UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell UNKNWOWNmalicious
(New-Ohuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
76d50b197ae5d74345b45bce41c64f4b
Malicious
PIC0402023
Malicious
PIC0402023.jpg.lnk
Malicious
LNK CommandLine
Malicious
[PowerShell Command]
Malicious
[Deobfuscated PS]
Malicious
[Lnk Summary]
Malicious
No malware configuration was found at this point.
LNK: Command Execution UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
76d50b197ae5d74345b45bce41c64f4b › PIC0402023 › PIC0402023.jpg.lnk
Deobfuscated PowerShell UNKNWOWNmalicious
(New-Ohuhuhuhuhuhuhuhuhuhuhu
76d50b197ae5d74345b45bce41c64f4b › PIC0402023 › PIC0402023.jpg.lnk › LNK CommandLine › [PowerShell Command]
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙