Malicious
Malicious
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 b7f3b648bee909047c1f02b378c3bdad
Sha1 fda99e3e227849a1caff85b1b604397c03a98f90
Sha256 7baf265185d6eda0f7ff403887c0ad851a1e4f43bbec9354c97845803a52f3de
Sha384 3655a0a7ee8d89cebfa58db9bf893c71a29c4ea5dcf20aa3eed19fa26e7907513903501057741adf24eddc5dbb72d7d8
Sha512 3558081d04956e927c7b4e79ba0091ef34d266ab3b2722b62b47666c6b293617b5fa12b661447ec2faf700e03363ed01220699fb6a6eaefbb4748d6e2cf1b9c6
SSDeep 12:5jsafgtS+J32eCt3vmlR3fD6N2D739CWm3QvD0y1O8zobeuWqBsafgt60+Jfs3xR:9sDtS+EeCt/cR3L6N2D739jmAvD0mubA
TLSH 85F047F7E9034420DC1BCF7F093ECE3A25259252024150E7F599251708F30C563DD0E1
b7f3b648bee909047c1f02b378c3bdad
Malicious
IMG_20260731_180303_020.lnk
Malicious
LNK CommandLine
Malicious
[PowerShell Command]
Malicious
[Deobfuscated PS]
Malicious
[Lnk Summary]
Malicious
[PowerShell Command]
Malicious
[Deobfuscated PS]
Malicious
video-45178679125.mp4
[Lnk Summary]
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
3 / 3
Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd>scr:ps1~T1027~T1059.001
Shape arc:zip>lnk>lnk:cmd>scr:ps1
malicious 4 nodes
Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>scr:ps1~T1027~T1059.001
Shape arc:zip>lnk>scr:ps1
malicious 3 nodes
LNK: Command Execution UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell UNKNWOWNmalicious
"iex(ihuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell UNKNWOWNmalicious
Invokehuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
b7f3b648bee909047c1f02b378c3bdad
Malicious
IMG_20260731_180303_020.lnk
Malicious
LNK CommandLine
Malicious
[PowerShell Command]
Malicious
[Deobfuscated PS]
Malicious
[Lnk Summary]
Malicious
[PowerShell Command]
Malicious
[Deobfuscated PS]
Malicious
video-45178679125.mp4
[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
b7f3b648bee909047c1f02b378c3bdad › IMG_20260731_180303_020.lnk
Deobfuscated PowerShell UNKNWOWNmalicious
"iex(ihuhuhuhuhuhuhuhuhuhuhu
b7f3b648bee909047c1f02b378c3bdad › IMG_20260731_180303_020.lnk › [Lnk Summary] › [PowerShell Command]
Deobfuscated PowerShell UNKNWOWNmalicious
Invokehuhuhuhuhuhuhuhuhuhuhu
b7f3b648bee909047c1f02b378c3bdad › IMG_20260731_180303_020.lnk › LNK CommandLine › [PowerShell Command]
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙