Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 aa181484ed513b4a4a97eb679d080b75
Sha1 b6b5e3c786bcb417d827bd0c1afe2bd0644d8ef8
Sha256 5cce9887165a8c8bba0d4ccb8af29e77d82aeeec672b216becb3c8f79205ea01
Sha384 31fa36ffb566925b0b3c178d1a709f0c975e08f3e3c7f05cf90efa06ef0a7ee0c652325635bb315b50ec82af5eaf0881
Sha512 86074c7727609b0ef9f4b121a419ac7614bf4198b1abdbfc72bfcaaf3ad80808f3d9f79742d64ddd4f3352340e52ecf9935c8476e412498daac12206a6cba53d
SSDeep 96:6VQI2PwQOfmg6CYrQzYoEbnkUj22YzfPd2fXg/cVDqgIiSZgbMgOyhc22Pkdi0pa:66I2PwmgwUQbnk+NUfPdEeyTSL8hcPk2
TLSH A5C1AFE46A0F2B00D17CCC7B1F8B5A49591962EED2C13E8FE93B347D356FAA42509151
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1
bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd
Shape arc:zip>lnk>lnk:cmd
malicious 3 nodes
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
No malware configuration was found at this point.
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
aa181484ed513b4a4a97eb679d080b75 › IMG_20260727_140710.jpg.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙