Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 8be05b17ff5a66adb7710c6c751ce61a
Sha1 e48bd404620bc2c06ba861fff9b1da7bc4fb3a49
Sha256 d88346856911fe4e4f1bbc5bb2e54cbb2c2737d76e6f4c89bd426077853e5e48
Sha384 c4ecf324acd4a662fba5fa74903e498c84b7f904d7d9a47c2b4360d2a59e8a5d829ae323d2b6df9baa0566bd9f65c1c9
Sha512 2844f26ddb32de8337d9bb250ecf5cef328f0ed233dc13a8383801b500bcd91b47adc278ed750802112de9eb16e7fc17c32b56f0929624a840eb4b1c518f243d
SSDeep 384:FYnSjdKx6WbrPV1yuknbg79QiehPOZjHcZa:ikdMPbrPV39QphW
TLSH CA42C095C84F27E2CA4E44FB58EF1517155DEF7522A29032B28F6B482C140FECD603E6
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1
bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd
Shape arc:zip>lnk>lnk:cmd
malicious 3 nodes
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
No malware configuration was found at this point.
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
8be05b17ff5a66adb7710c6c751ce61a › IMG_20260727_132207.jpg.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙