Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 b792fbbcbfba9624d8529088fe6473ec
Sha1 533bc7f522df2d6458c6f6b5a93c04b69db40e86
Sha256 36032d880dccb83a4c20a88f08b6da73da33b9ffde996628b32e56c8cbf7c960
Sha384 ec7e46b136b9c87b2f123c6631b5bdef09053e3fb5d82ff723110d1d0b9d33b8cc3e8418280abdd62abdd4478875d851
Sha512 53a3b7c857beed3d8e358164fb9ed6ab6d84292ffed9a749cbff65b95f55971086d0d9e3078e02939d30b485991f80d2f77687033bb1dee59b237d11e9a38af2
SSDeep 384:PfXqU8BQtOeG8Fk5qvccFaHG/oO9G0WBi+1y:Pf8leWQvcOwlssBi+g
TLSH 4952CF1DD4FAA7D35E4A0FB110D2DBFC4D769F15DCDA202552AE001D38A6C20CAB12A4
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1
bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd
Shape arc:zip>lnk>lnk:cmd
malicious 3 nodes
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
No malware configuration was found at this point.
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
b792fbbcbfba9624d8529088fe6473ec › IMG_20260727_095439.jpg.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙