Malicious
7986bdc3f245ca0bde6d317de4a895c4
ZIP Archive
MD5: 7986bdc3f245ca0bde6d317de4a895c4
Size: 28.52 KB
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
| MD5 | 7986bdc3f245ca0bde6d317de4a895c4 |
| Sha1 | 4bb2f4ca44401baa77780f824aa6def46a9bd261 |
| Sha256 | 1b7db08d55fd1d7f6c1cc9a7ebdfca8a15316b277372fa848626be8e56a70e7f |
| Sha384 | 5c602d2a330743fa1ec38b11bae2072becf74ca3d3cedff6e226b33cd0e312e1cb78602e47d4b60665da1d047b852ed1 |
| Sha512 | c7c2a957af508c07b33d9231bfb94e7047f69d4ca1b0feb6194890c85cae8318869b125d381e162ce852d00b67034412b34559feeef4a0b799cbce229173a464 |
| SSDeep | 768:agpbhK44NBdBEEiDK+DKFQR3ylG67PvB2ybPa26SIojN:aobo44pBE19DYntPvAybzN |
| TLSH | 16D2E1131A602ED7B0DBA677C9768A3C2E125375F691870D52BCE00F6F8F96C498A385 |
Malicious
Malicious
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
Structural branches: 3
STICH kept: 2secondary ignored: 1
bin
1Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1027~T1059.001~T1059.003~T1202~T1204.002~T1218>lnk:cmd~T1059.001>scr:ps1~T1027~T1059.001
Shape
arc:zip>lnk>lnk:cmd>scr:ps1
malicious
4 nodes
Path
arc:zip>lnk~T1027~T1059.001~T1059.003~T1202~T1204.002~T1218>scr:ps1~T1027~T1059.001
Shape
arc:zip>lnk>scr:ps1
malicious
3 nodes
LNK: Command Execution
UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell
UNKNWOWNmalicious
$d = Nhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
Malicious
Malicious
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
7986bdc3f245ca0bde6d317de4a895c4 › IMG_20260908_075537.jpg.lnk
Deobfuscated PowerShell
UNKNWOWNmalicious
$d = Nhuhuhuhuhuhuhuhuhuhuhu
7986bdc3f245ca0bde6d317de4a895c4 › IMG_20260908_075537.jpg.lnk › LNK CommandLine › [PowerShell Command]
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.