Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 7a39ebdd67c83f613de179c9359c813e
Sha1 3a28649c6d1d3e1eab127d3a8ebee595f4fc3324
Sha256 e6d6ccbb6adbb7e6d16eebe3f34d08a7b48647dfc5b1930f9a0463c2e64c11a7
Sha384 c76fd661397649968e180fbdbcbdf92968dde506b46faf375f3bee61eecef35f0a546fa2764a612a3a6d535d3f654f0b
Sha512 ea867fd8213ee8456a644f0cc5c115ba2a91558f03a11a052902c07bd47e53e33306244124f10d371ce03ed98ec6a49defd2a6d807c2f19092b4c0345d909a1d
SSDeep 192:kSQFBkjC9E5M156mQQ6pWO1kul5TKL+yIRsa6CniIZ23T6cy52lteTjnOlZ20en:kSQKX5s6mQQ2Rk+tRB7+K5SeTynhc
TLSH 4252B0D9F1415CBFE3E7CA2B634BB12F25BB16005B5238E3019059B09622911E6E5F9D
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1
bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd
Shape arc:zip>lnk>lnk:cmd
malicious 3 nodes
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
No malware configuration was found at this point.
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
7a39ebdd67c83f613de179c9359c813e › IMG_20260725_073340.jpg.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙