Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 afa1f766eae012853ff973b4866da32e
Sha1 c3b5caae8fae7ef2f7c5c71a88bf90d926792316
Sha256 fd1e60c9166dc4afa0a664cb768ce032d73f4965dacec8c37c660f646b077ca4
Sha384 0c24828c6b28be33c6e43f25e7a304c6ff415f40cb6d123cc7e605ba10fdb4b5e9ae985cde39a4d87d29a60ec2d68058
Sha512 9ad8637bb50ff51b916ff46cbcdee12a8ade8763b51674ddaffce02c1d23939af7b1b2f9b7d0e7858340dd29997c03bb37f85e59077e8dcf28520dcc3d604edb
SSDeep 96:VZcWDwO54i10d38siyn+ebiiMFwJVN6+mnSJzLw5:VZn71K6y+4i9WLmS1w5
TLSH F6817EAE572CE86BD731B2BDF29FF6450154B9B81425147973022E7276392062FC50DE
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1
bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd
Shape arc:zip>lnk>lnk:cmd
malicious 3 nodes
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
No malware configuration was found at this point.
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
afa1f766eae012853ff973b4866da32e › IMG_20260724_143157.jpg.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙