Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 b00658300f68e08905e25c01139f75cf
Sha1 36bba39aa131ee3002e93a1224ac50bea0d524b2
Sha256 ed3b8d3590035ab9bc664a860bf4fc30638260d96b28974857e14c2db359f555
Sha384 21b176bfa532a8e2b76d19000a6ba169457756c5f5498db44b63b04d5a0e635fc4b7260a1a22fbca19fa55812ba750f7
Sha512 7fb2543ab8699d613c8dc98a852adca40f1604246980577be5deb5aa3a76c619601d66a6f9df0ea5c4ae6304a930a16ba9ee7b6706a22507df12894a24d0e298
SSDeep 384:77o1T9JBIxFoGx56eKuEMWFJR3eimxJy+DHds/fn4qVksqhUqmuM1Tbk:v+BIxSGj5kMWPROimxPH84qVTqhW90
TLSH 9172D14F98257A491BD14639659A753A53CEFCC95342E3CA2D6958ECB836083F0727B0
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1
bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd
Shape arc:zip>lnk>lnk:cmd
malicious 3 nodes
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
No malware configuration was found at this point.
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
b00658300f68e08905e25c01139f75cf › IMG_20260727_140220.jpg.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙