Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 98dd1821c6d4d04526a5535ac4b4a0b3
Sha1 3dddf7455239b5cb2aca99b61c7b0c2897dc5608
Sha256 4e1f4f78e973e47c8f744027ed48ffe7aa2d788f8b77a2b0c22c5f9196481b25
Sha384 796aa8b527b7588249313ffc0012e7e4efd6a473287da03812da4083df349a7a7e7a75f6ee2e960a9e19f993fe92bfc0
Sha512 7ef1ad137907d9fffd1c95471fca6d1c8694079abf8d110db38c200bfc5e77f54364c5d521695513d02f9ffb271f26733c4e7d3bd7c8a25898e18f5c60079c87
SSDeep 24:9Kl8DOrrPII3sNP4cijjQ/mTUXaGXBu24/t8IHlqfx73qIn7YBaHMNY8ateU/AyK:99QP93Oij8/mIqauNHlcx9slatx/qN
TLSH 75310830E97244AEDB4F74FD60A89D451520A5688C9E5F6454E6E89CB026663434F0E2
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1
bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd
Shape arc:zip>lnk>lnk:cmd
malicious 3 nodes
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
No malware configuration was found at this point.
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
98dd1821c6d4d04526a5535ac4b4a0b3 › IMG_20260730_115646.jpg.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙