Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 96f639ecb5153ed9cc22a8afafbb9a7d
Sha1 5cb79dfb145ea75fa3c71eea14152df9e4b9f218
Sha256 9a495dba2871ae48cc6f5166e3dfd3bf5deb67472492270404cc895cbe85ca8c
Sha384 2ba842fefe07378d290e3e1d8da2fc8ae04cc222f96f65398ee3287a2cda71e364eceae5c7740565039feffe7b612906
Sha512 6e550a8218577f109d6e32d3789cb231f7ee99f48c7f0f59bf9eb6aa7c3bd1acd568f981232dadec0639d8e3f69fe86edaf911d112532b7b686cc5786876fff7
SSDeep 192:8wkj97FdvDAMSW84YbbwRS2WcHs7VzPSAggkArb/uf2:8HRIMSZnb+JW1lJKMGf2
TLSH 72E19D6641A747D4EA6983750EEC004E938DB4A0134D0DE028CBD90F1BCFCF9B29EA4B
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1
bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd
Shape arc:zip>lnk>lnk:cmd
malicious 3 nodes
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
No malware configuration was found at this point.
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
96f639ecb5153ed9cc22a8afafbb9a7d › IMG_20260724_160030.jpg.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙