Malicious
Malicious
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 7793b015e5530086322b312685bee9f1
Sha1 354c4abb97fbca599d09bcabdd65cf726d41b18c
Sha256 7c6984cc3da35251a0ab9cf732d192f51ac99df0d848500b2c02ea0273f0cf2e
Sha384 c74c5c95f5a57b05b49ad6e713a1d1d3c32af388a012892cb16276d6ebe459fbcf52bfc3ce00865bdab74fe50f5c36b7
Sha512 62d27d3d86cd97e21e5de431090db580643ff5ea13d16eb470c1b5ad7535e492cca3db5397121b06b03be459cc5da6ea5732891851789692de64bdb906c448f8
SSDeep 24:9SJQSWZ+unUdBU3bCOJusaPG/Ta4FmSqoHrNIGJd+M:9SJQSWYoCbiuovFPqON7h
TLSH A521372C98AC9943D856D5BF32EB0D40D530535DE406D85F6B0752D1EC92B742F7534B
7793b015e5530086322b312685bee9f1
Malicious
photov_598498738916.lnk
Malicious
LNK CommandLine
Malicious
[PowerShell Command]
Malicious
[Deobfuscated PS]
Malicious
[Lnk Summary]
Malicious
videoa_469288217267.mp4
[Lnk Summary]
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd>scr:ps1~T1027~T1059.001
Shape arc:zip>lnk>lnk:cmd>scr:ps1
malicious 4 nodes
Path arc:zip>lnk
Shape arc:zip>lnk
2 nodes
LNK: Command Execution UNKNWOWNmalicious
%COMSPhuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell UNKNWOWNmalicious
$e6rjjhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
7793b015e5530086322b312685bee9f1
Malicious
photov_598498738916.lnk
Malicious
LNK CommandLine
Malicious
[PowerShell Command]
Malicious
[Deobfuscated PS]
Malicious
[Lnk Summary]
Malicious
videoa_469288217267.mp4
[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution UNKNWOWNmalicious
%COMSPhuhuhuhuhuhuhuhuhuhuhu
7793b015e5530086322b312685bee9f1 › photov_598498738916.lnk
Deobfuscated PowerShell UNKNWOWNmalicious
$e6rjjhuhuhuhuhuhuhuhuhuhuhu
7793b015e5530086322b312685bee9f1 › photov_598498738916.lnk › LNK CommandLine › [PowerShell Command]
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙