Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 a83732ace0f05925e2f6218af8fd05a7
Sha1 0ecf00cdf31468a1183e805ea91a0047f0806922
Sha256 7b7630c690bc8d6bb526f62cd49a546acd4067f9766874d6fddc9b95c079d9e0
Sha384 182afde9d799791a49231728f340236954e923e83722216b562256b2f02be73db4270b82ce2ac3a9bd714f3768b65790
Sha512 25fa4a377374c68a136a0b8b93bd9928fb928fd44339f6cff5e49d03aa13f286e1903e9efb5fe3cdeb1824de3e4e3a1f9521e4488a0c552dd7eb06b3079978a2
SSDeep 192:JTP7oLIIixnC2inCX/MqCPyUFRgzKwCuNElB3axzzOHFt06:x79IidOy1CRAFCuwMsXX
TLSH DC22B08A7C66A41F9F8151318AEC665C126A3B20BF183D17F3E44E9D74C59A6923C083
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1
bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd
Shape arc:zip>lnk>lnk:cmd
malicious 3 nodes
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
No malware configuration was found at this point.
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
a83732ace0f05925e2f6218af8fd05a7 › IMG_20260727_080418.jpg.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙