Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 8388be78b49833532dbc93ed01a53fc9
Sha1 b2271d6c5d1b90d7e04242a2f36ed6efa6a2a9e0
Sha256 bbbc617f7ff6ad418a5e7604779e03fe861d44217c1d40bdfe2100150efdbd30
Sha384 85bef5cfdc6af7a72231b4da26ffdf3ef76e9dbe188457e0e5408ecaf623eff9df7ac56db5d93036347825187ce888ae
Sha512 4dd558a2059f0bf8271fc346a0d008b9b4baee2bd7de6a2081ee196aae4b724baf9f8065455c7a20d4a47213af7372bff7125febe899b41a5d878128500a158a
SSDeep 48:9HgNEv8YoIhM33B/zSX3ZUpHUlP7t3h3NYLNMAeO:9gNDaS33B/zu2pH27tKX
TLSH A841F9B494C06872D98F4B78B8EA5E5F9601DE22D1F1300B52CD6127251E886839778D
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1
bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd
Shape arc:zip>lnk>lnk:cmd
malicious 3 nodes
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
No malware configuration was found at this point.
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
8388be78b49833532dbc93ed01a53fc9 › IMG_20260730_200229.jpg.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙