Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 9f8493e86bc07ce01d35052871a65258
Sha1 8ece0c6ccc6cd46919e488dc2e017308f839518c
Sha256 f9e3cf66cb732678457f1471a276c97bde63cd738c6ddc7bc9b43cce34651b82
Sha384 5dc0acc20b1e24630178d98a40ec1ee458f20a4f4a9ba90d29e26f25f971afde3c696dedbbd45d69292f1d2efa4cc69f
Sha512 3ba1ebe51fbd5554484a96bee328129cfd87ca664d56639bd89ba9a45ac92276a5b1f47b378eabd168f1ab6fc3f717ffd50e22e582ca8367f1a5d8c5f8bee2a9
SSDeep 192:UGkemVOkZQMBteHKoo0UE3VUz8fwJOsDda7tVL5vAFiokO3mmym9:UzVOaeHKoo0USOzKkOsDKVL5vxSd9
TLSH 7822AF248D38E9409DE33FF731E4E7B4A4AD92B5C504139E9A8AEF4A4501EF26177804
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1
bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd
Shape arc:zip>lnk>lnk:cmd
malicious 3 nodes
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
No malware configuration was found at this point.
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
9f8493e86bc07ce01d35052871a65258 › IMG_20260724_125301.jpg.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙