Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 7f7a252483a8844fa43b2eeef2a13d79
Sha1 e620530a0271bed1774e4b5a7a4e1d50428ba405
Sha256 3c249a9959969177ed3cef5952f04fb169439768f7993832723be6d13f96cd65
Sha384 0daf633c62f041c2d18792d9e708069b966b8c2804fa619b2fcfd49958f5079e7308a4b8d16501fc9f46ec710a751b21
Sha512 fa574f74763a017a0c8418b4d7e7ed6cf4949c29317a2ef0414e8a9101a074d98aec7c754b0c0895010918f2d6f53e2605441b8904995d6930d43c8b70b995fb
SSDeep 96:BgSmC+De6ud1X2HFVyS/BwDWwkv84wqDwLZ/BGzOgsVzDF33/D:WJ9HFV5wDnkv8QwLZ/mOg6DF33/D
TLSH AA919EF2B568E901E0C8D33B385FAF98115B239B79068405E5710C2A79F84BA26BF907
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1
bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd
Shape arc:zip>lnk>lnk:cmd
malicious 3 nodes
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
No malware configuration was found at this point.
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
7f7a252483a8844fa43b2eeef2a13d79 › IMG_20260729_001604.jpg.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙