Malicious
Malicious
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 90130cef1ad2b42d1d5e43887e61d756
Sha1 da01a80d76192f24d9061a805c20d41b39ff2712
Sha256 007ff52133e954868179f1be8cc33b986c9377aee554573def0d7de0d90106d5
Sha384 4f1bd3935e53c2409df27619620dd401e9f67a16db8d95512b7d15de0eab44d858c3ab0f05584779924841c26262942c
Sha512 fc3e61d646143945d4a02041873dc4c147abf1631872658da86b7394f53d50d4f29e280d4360d6d52d447ec4c7bf2641d8124ef107ed8ea349daa7f82133c4d1
SSDeep 48:9wgQMXPDCzF/8N6ud4gwrubNCQyilDGsaZK0M:QHm6ud4B0k8Gkb
TLSH B6311A33B7E7E533F4C8A279E237D02F21BB41048081C21714D9A6518EF01408BDAD4E
90130cef1ad2b42d1d5e43887e61d756
Malicious
Travel-Plan.lnk
Malicious
LNK CommandLine
Malicious
[PowerShell Command]
Malicious
[Lnk Summary]
Malicious
[PowerShell Command]
Malicious
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002~T1218>lnk:cmd>scr:ps1~T1059.001
Shape arc:zip>lnk>lnk:cmd>scr:ps1
malicious 4 nodes
Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002~T1218>scr:ps1~T1059.001
Shape arc:zip>lnk>scr:ps1
malicious 3 nodes
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙