Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 980b23b0bdd3572578e62ce3ffcba778
Sha1 3ba179477377ea157bda64f374430564bbc83b24
Sha256 ea056acf5d92eb07bb032f88e679c73aeca7d0e43b8244667ef02c9170dba945
Sha384 697186c366b8b85290533baaa04bbbf06e69e59db92ec132d935564b690920bf1c70768ffbd1756cdbea4b53dc336d41
Sha512 b10828ddd9a0883dd34d9226f151699f7816bfe559f6d56d866a2ebe7b40e58a092e78c9b04163c5eb3563b166645473118d93f12d602098d869ebdc6d8d594b
SSDeep 192:gC4LEixrZnuv1lWUZNSL1lVQe9TTrXu6VpLWtSSPo4GUSfYe:g5zZ2BZCHHXu6bODQ4HSQe
TLSH 42F19EF3CFD606A1DEBC1F79E727BF19AAAB0A4A11105D59DFC0A9CA9CE10550B2DC01
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1
bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd
Shape arc:zip>lnk>lnk:cmd
malicious 3 nodes
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
No malware configuration was found at this point.
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
980b23b0bdd3572578e62ce3ffcba778 › IMG_20260727_213809.jpg.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙