Malicious
Malicious
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 7f42dd3d5ea8ca52318c71971e7c0c95
Sha1 cf19a119bab531b7c3110f7f0b5c3812870641df
Sha256 71597d1d3fd474edc6cd032cef4453784b0f9e0952ec5a086006e391922f59a9
Sha384 39eeca9008db8ccf4ad6cbcc9d414a33e4be31bd399530c14e50ee48384ab954b2af7ac58c4dba4463b3953e1c239e47
Sha512 14fe48b3cef52833f7da0d7e1f53f5a2916471a3e196177e901b7849c866b08b0834b896595330beb0f372e678ae998531e75f484af0b0eb5543d4ec8aafb40b
SSDeep 24:9WXCFvbpCTIprU/JIrH9rmkGxbW3sW8xrSxs/WZCgI3q9mS:9WK0Q9rTGM1urws2kq9T
TLSH 7921A5AE866CC2E7FEAF49B82D440B095434A5B11643825F2F12F21F7A23710C7412F8
7f42dd3d5ea8ca52318c71971e7c0c95
Malicious
photov_929178069480.lnk
Malicious
LNK CommandLine
Malicious
[PowerShell Command]
Malicious
[Deobfuscated PS]
Malicious
[Lnk Summary]
Malicious
videoa_493660540482.mp4
[Lnk Summary]
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd>scr:ps1~T1027~T1059.001
Shape arc:zip>lnk>lnk:cmd>scr:ps1
malicious 4 nodes
Path arc:zip>lnk
Shape arc:zip>lnk
2 nodes
LNK: Command Execution UNKNWOWNmalicious
%COMSPhuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell UNKNWOWNmalicious
$szh7dhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
7f42dd3d5ea8ca52318c71971e7c0c95
Malicious
photov_929178069480.lnk
Malicious
LNK CommandLine
Malicious
[PowerShell Command]
Malicious
[Deobfuscated PS]
Malicious
[Lnk Summary]
Malicious
videoa_493660540482.mp4
[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution UNKNWOWNmalicious
%COMSPhuhuhuhuhuhuhuhuhuhuhu
7f42dd3d5ea8ca52318c71971e7c0c95 › photov_929178069480.lnk
Deobfuscated PowerShell UNKNWOWNmalicious
$szh7dhuhuhuhuhuhuhuhuhuhuhu
7f42dd3d5ea8ca52318c71971e7c0c95 › photov_929178069480.lnk › LNK CommandLine › [PowerShell Command]
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙