Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 7faf0444e7b5522c97b466ea712c8dd5
Sha1 51f925f82c09466b18fbe4c68036b39a496d3dbd
Sha256 88dd284b28636c02103858d594efe7daffacdd611129b9dad680cf071dbe46d4
Sha384 5c77aca9e39d6fc7c1693ab182aaffa923e7f153054b7f2e6c576a015ce6fa29e3883fb5cc5abbe2b3cc46cd414d0c64
Sha512 9661cc965e0509fde522bcb80c9c30fc617f1537ac311f4351de183fcd3aa8a413ecdf49b65a1cf85ef659a9a2d9deb1c89b432241697c2309d416441e162acc
SSDeep 96:zBVV80S6fm277ikNUtKJL8oAUiPu1DYY5brtuxh32DH0aj1im1taCa0J7F+ce:rV8zk7ikNUtLJUik/NGGDUCimzm0B4l
TLSH 75D19F2AD2EB2152E41E707CB5B5ED69353D37F7A3B347A2391A9298C0504FE32DC940
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1
bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd
Shape arc:zip>lnk>lnk:cmd
malicious 3 nodes
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
No malware configuration was found at this point.
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
7faf0444e7b5522c97b466ea712c8dd5 › IMG_20260725_032955.jpg.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙