Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 7c93147b0c33df33d86c032b81053cbc
Sha1 01cc7e3a0a32e9d082b27fe57db26cd64da22467
Sha256 cf318b1960b9562ca14a9ca4165150945091ff96602452665d55c95b361b63c1
Sha384 661e9b510fc140ff10c88ad8344d545efdabd7743e819105f0755b708c56a4737c649dd08e38c184eec994f168619241
Sha512 e194244f1714ae4435c3571065086b9e2589cdd32e82eb49317e447b41fd378940ce05ee89e0af2432ab0969f3af32e23ff836030398f08bed16a8cbaa185703
SSDeep 192:kiRUPv+zCRsBTjpy3NROHLK4aEQ/DySXGeojNi6aPzVM+s2yGn:tWPw2oyXOrja7/DySWeojNaiQH
TLSH CD22BFB696CD6726BA03BF71A6EA691F26D1757987AF20B3920D01D20647004FA0EFC1
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1
bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd
Shape arc:zip>lnk>lnk:cmd
malicious 3 nodes
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
No malware configuration was found at this point.
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
7c93147b0c33df33d86c032b81053cbc › IMG_20260727_182719.jpg.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙