Malicious
Malicious
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 7e034642aa06dd01f80476fd027eb51e
Sha1 927315442d3cce6f101cd97df851df20ff619955
Sha256 4e81d94aa44752c3077a3f5039159f47797a3ffaa1def4d6147b657b79e0534c
Sha384 588d3da06a466be261f77d297b8c19e2f2d0b2991a7d25e8f2509bc9956c62ba76c2e0bee4f8b8965ef30512a243f7d9
Sha512 88e5e98df7d64cd7f7bafe00618063188901d87c549db6f1aa3dc5eedfb603fc509fae50459bb7ad3ae823d291e526bea1006b1c8be7952140ab1e2881b42b6d
SSDeep 6:4xtiy6LgolHKlFcnlj+SEEgykQLPfBMlpIoF6SaU/k1ARokJxt:8oyj4QkCikQLhMbHFMf8
TLSH D911C2601BCB5A00F3F58B30BC3A921519647C2C89318B8D0385196C0C26A109826F36
7e034642aa06dd01f80476fd027eb51e
Malicious
LNK CommandLine
Malicious
[PowerShell Command]
Malicious
[Deobfuscated PS]
Malicious
[Lnk Summary]
Malicious
[PowerShell Command]
Malicious
[Deobfuscated PS]
Malicious
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd>scr:ps1~T1027~T1059.001
Shape lnk>lnk:cmd>scr:ps1
malicious 3 nodes
Path lnk~T1059.001~T1059.003~T1202~T1204.002>scr:ps1~T1027~T1059.001
Shape lnk>scr:ps1
malicious 2 nodes
LNK: Command Execution UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell UNKNWOWNmalicious
"iex(ihuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell UNKNWOWNmalicious
Invokehuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
7e034642aa06dd01f80476fd027eb51e
Malicious
LNK CommandLine
Malicious
[PowerShell Command]
Malicious
[Deobfuscated PS]
Malicious
[Lnk Summary]
Malicious
[PowerShell Command]
Malicious
[Deobfuscated PS]
Malicious
No malware configuration was found at this point.
LNK: Command Execution UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
7e034642aa06dd01f80476fd027eb51e
Deobfuscated PowerShell UNKNWOWNmalicious
"iex(ihuhuhuhuhuhuhuhuhuhuhu
7e034642aa06dd01f80476fd027eb51e › [Lnk Summary] › [PowerShell Command]
Deobfuscated PowerShell UNKNWOWNmalicious
Invokehuhuhuhuhuhuhuhuhuhuhu
7e034642aa06dd01f80476fd027eb51e › LNK CommandLine › [PowerShell Command]
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙