Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 9b5cc68a6fcb1b1374e11874b8ac3945
Sha1 156fae47d3b1bd91192fd29d00602bf95e1a8536
Sha256 31e677766c870a52e01c14ed84bf98d59b9534d0cf265ffef8b40b9b4b245a5b
Sha384 254ad0e997db876706ef824a85cc6474ccfa7eabcee096d0533a807774be147fabed9ac19dd13821227bb970e556fda8
Sha512 637f08be6723d18ee5562691ddee02b20e783f9aed9a45a81470a6dc9fedb615ed9c34ddb07f76052c4a13d6b73a3ea3b949f1e4e5b9dc716fccfbeb22d82388
SSDeep 192:VT6/GcKUGFpcMJg8J16WvJ6GYlqFolIeU06hH:l6ecycMJJkWh1FolX2hH
TLSH 11D19E2090116A27DDF6B8F2B29785AB0B33E1359169131B7C0C818CD63967E3B6BF15
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1
bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd
Shape arc:zip>lnk>lnk:cmd
malicious 3 nodes
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
No malware configuration was found at this point.
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
9b5cc68a6fcb1b1374e11874b8ac3945 › IMG_20260727_224254.jpg.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙