Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 8518e5ca56c8a35e1e61995e30183091
Sha1 f2567feacb3ffca1d289b499bc70059a90bc14cf
Sha256 eabb7c5b0361963ad550fa2bdf7b60b64430cba2e1a89c4b3429d373f015af4f
Sha384 b65dde1cde531f98940b37288a73fbcd08e6987fa351185e09d1547aca9b003f28d905941248170f0d652b879c5299d2
Sha512 90b33e800c6fd60a15dc1ba87da642521ffc53f0c912232aa8778460c82fd65c6348843b4404c49c9899bae23b9c3ed34c6f4f88fec250943e95311bf8b9fba0
SSDeep 96:qGZlMq9bYcSbvbmx04AY7SpNs6E+a/+ftnLc6luSQgG7:FfM2ibWuY+PW/UAIxA
TLSH F4C19E7105FB080CC8AF1EB87D5E61C2F69650D806D8CAC8BCAC0B0D671891E8CDA3A9
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1
bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd
Shape arc:zip>lnk>lnk:cmd
malicious 3 nodes
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
No malware configuration was found at this point.
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
8518e5ca56c8a35e1e61995e30183091 › IMG_20260728_171835.jpg.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙