Malicious
Malicious
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 7be8feb7e5398153b8ee0793fa02a40b
Sha1 dbb139f502e5c3b1341a11fb9a1d8a678b24cb88
Sha256 0a25be6a0fedbb5c23e1b951214800ef7e86ae36626f27bfe7c9399f1527a0b0
Sha384 b72ea8f4447b0be685b4bb6b6063d132f0fb42054eacf5eec7f62cf47c313eb29b22ad58fdf03cf747e5a481272b3abe
Sha512 2baf45b42add4d304854566ca1498601f6a525110ebd6574a7e9a121658e65a98ac29ef7a4955c6e64785121e4e903dab77b42632d4c340ad7cf4798425afae3
SSDeep 12:5jeEqUHkhmhr2nWXUL6LJyzj/dazv4py1SAuAo4/DYJw4xoye0yFz4iE:9rq8khmhrvQgIj/dazvumSAPv/DYJJxx
TLSH 68F0AC74C0B8F591C9DED335C829CA4B16BE5F1052B580631C203660F9119BE5E5679A
7be8feb7e5398153b8ee0793fa02a40b
Malicious
imgset_81362783030328.lnk
Malicious
LNK CommandLine
Malicious
[PowerShell Command]
Malicious
[Deobfuscated PS]
Malicious
[Lnk Summary]
Malicious
[PowerShell Command]
Malicious
[Deobfuscated PS]
Malicious
clip_916473418629.mp4
[Lnk Summary]
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
3 / 3
Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd>scr:ps1~T1027~T1059.001
Shape arc:zip>lnk>lnk:cmd>scr:ps1
malicious 4 nodes
Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>scr:ps1~T1027~T1059.001
Shape arc:zip>lnk>scr:ps1
malicious 3 nodes
LNK: Command Execution UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell UNKNWOWNmalicious
"iex(ihuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell UNKNWOWNmalicious
Invokehuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
7be8feb7e5398153b8ee0793fa02a40b
Malicious
imgset_81362783030328.lnk
Malicious
LNK CommandLine
Malicious
[PowerShell Command]
Malicious
[Deobfuscated PS]
Malicious
[Lnk Summary]
Malicious
[PowerShell Command]
Malicious
[Deobfuscated PS]
Malicious
clip_916473418629.mp4
[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
7be8feb7e5398153b8ee0793fa02a40b › imgset_81362783030328.lnk
Deobfuscated PowerShell UNKNWOWNmalicious
"iex(ihuhuhuhuhuhuhuhuhuhuhu
7be8feb7e5398153b8ee0793fa02a40b › imgset_81362783030328.lnk › [Lnk Summary] › [PowerShell Command]
Deobfuscated PowerShell UNKNWOWNmalicious
Invokehuhuhuhuhuhuhuhuhuhuhu
7be8feb7e5398153b8ee0793fa02a40b › imgset_81362783030328.lnk › LNK CommandLine › [PowerShell Command]
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙