Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 a720afd7aa01d93e7f845d6f9a22b538
Sha1 2486d8ccaf292063ebc30f404d00f3c72b8be11e
Sha256 2bc7c63838f751786cb5bfc3e885e7622b6958f99e4b53aa7e201e87ab794591
Sha384 a0cf366e0d68c3e9ee8b34053da43d7e179a4aaa6e3604013f58442cc18d0c06dfd6c3e4f8d812cc6d0372b87ca8bf60
Sha512 968e79497417fda8e4cc9219964b83deb16c17003549f4e829fe3c61606d1af7e93316c88a0c7e70412c9d0cd468bea2a96ed1c0913889b748b62539ee6e5fe6
SSDeep 24:9OXBmNEnyUzYSDt4PjCSIrCqjwlw5dyqLJgoFYQUH7MKaUpJU1345D4lbrBpBmr:9Ok+1tAIPwlqdyqlDF1IaUA1o5kpNKr
TLSH E721E9BD9D1AEB81D46AB07A594F9FFCE384FC74500162AD9369A30069C41505A36747
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002~T1218>lnk:cmd
Shape arc:zip>lnk>lnk:cmd
malicious 3 nodes
Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002~T1218>scr:ps1~T1027~T1059.001
Shape arc:zip>lnk>scr:ps1
malicious 3 nodes
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙