Malicious
Malicious
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 8160ee7047f4631863c1f5ed7ad117a6
Sha1 70d4cbb89ba7783fb92b52d36935f78641ba0563
Sha256 613be7cfb4917b292678d5bccd4551b10d7bd210b5b6fab0a4d1a5dd537c0fc6
Sha384 d938c63a0f3005f0e28161eb4b3e9a04cc16373a85e5afec7676f56ccc4a799a0870dc0cf545b87745f6006f4a7d6677
Sha512 f400119d8c68c59377863af0fe5a74314d96f44eff85b2bf096ea2dfe4b7b2b2bdb8d34d48313c7890243fb6341ba08c4e455d1ddef3cbc0730bec20e9987005
SSDeep 12:5jf82bI6c5K1/Kt7Ie36c6KpEf8y1OXAo4/DYJw4xoyf882blpaxMJ1:9fb7cSk7I6F6KOkm9v/DYJJxHv253
TLSH E4F0E1B0E1B9E040CDCBD6312C54AEA90231D94921D8E4FB7621717CFF8818B2DCC9D1
8160ee7047f4631863c1f5ed7ad117a6
Malicious
DSC_20260713_103752.lnk
Malicious
LNK CommandLine
Malicious
[PowerShell Command]
Malicious
[Deobfuscated PS]
Malicious
[Lnk Summary]
Malicious
[PowerShell Command]
Malicious
[Deobfuscated PS]
Malicious
video-08709197645434.mp4
[Lnk Summary]
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
3 / 3
Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd>scr:ps1~T1027~T1059.001
Shape arc:zip>lnk>lnk:cmd>scr:ps1
malicious 4 nodes
Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>scr:ps1~T1027~T1059.001
Shape arc:zip>lnk>scr:ps1
malicious 3 nodes
LNK: Command Execution UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell UNKNWOWNmalicious
"iex(ihuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell UNKNWOWNmalicious
Invokehuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
8160ee7047f4631863c1f5ed7ad117a6
Malicious
DSC_20260713_103752.lnk
Malicious
LNK CommandLine
Malicious
[PowerShell Command]
Malicious
[Deobfuscated PS]
Malicious
[Lnk Summary]
Malicious
[PowerShell Command]
Malicious
[Deobfuscated PS]
Malicious
video-08709197645434.mp4
[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
8160ee7047f4631863c1f5ed7ad117a6 › DSC_20260713_103752.lnk
Deobfuscated PowerShell UNKNWOWNmalicious
"iex(ihuhuhuhuhuhuhuhuhuhuhu
8160ee7047f4631863c1f5ed7ad117a6 › DSC_20260713_103752.lnk › [Lnk Summary] › [PowerShell Command]
Deobfuscated PowerShell UNKNWOWNmalicious
Invokehuhuhuhuhuhuhuhuhuhuhu
8160ee7047f4631863c1f5ed7ad117a6 › DSC_20260713_103752.lnk › LNK CommandLine › [PowerShell Command]
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙