Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 7fc6b5b7a73134c46016f3b021af9134
Sha1 1b11f513cb5e21d8f0133e3dce229cef5e93ec41
Sha256 fb143ac1c0f086dd9d598a8065bea56a0d9f5c5b4c5a9e6e5acced07736f7938
Sha384 b4c28549e02364177992ebe286d67533a2b178886ec48da60988a370f2362015accd03a71642e45d50341d840a433360
Sha512 17ce4c6c11c6414bfe712d3074af435a153e6c8baab8c2efa6b6844a56d07485f036fa8e1e26c39bfdbae30d3115e2dddc79255f716249dfbacd29a46d5e4080
SSDeep 192:Xbil/kWUGJIVy4is8DyC8U+35rkKmr1DRy6f6asZS9qG3qu/qp:rSkcbjsoyI+358DRy06IxY
TLSH EFF19EED1C710612F8D3E07272668A4EEF1AB435DBC9040DDA7DA250C21E769E19EC84
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1
bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd
Shape arc:zip>lnk>lnk:cmd
malicious 3 nodes
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
No malware configuration was found at this point.
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
7fc6b5b7a73134c46016f3b021af9134 › IMG_20260728_051703.jpg.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙