Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 78612cc8284462bcd1d388310a9d5d52
Sha1 5c6509667f299b51eb886ed37345ec493a988cc1
Sha256 08a7e7d2ca735e2e9142b50b0874cd801efa9058a6d1288b47a1f2aaff4f17cb
Sha384 cc45f4af64a6a459ff7c4e3db9c73eb09725d8a65055db39f859efb2c08da856bbd947c5fd0e3b55e441dc1539d7c290
Sha512 25681c9b346b4211bead22cee6a436cb52012241f66886c754aa2643111ab07fea9e891707343fc07ddc39c5e700802603f7ef23f1bce102affb18ed8090b9d5
SSDeep 96:/yQoA418qx84VvTLcDTOP/nCOaGlwOHSr4UhMxjojZJTMSse7:aPAYFS4Vv0DTOP/nCOPlSr4UkjuT
TLSH 4A714D6B89CA450649D25A71E9270E8C024EF1CECE72A6A565C428DA5C4BFF1B84E18D
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1
bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd
Shape arc:zip>lnk>lnk:cmd
malicious 3 nodes
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
No malware configuration was found at this point.
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
78612cc8284462bcd1d388310a9d5d52 › IMG_20260728_222732.jpg.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙