Malicious
Malicious
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 b8df9a2c000cd9ba4708b646b9547393
Sha1 dc7dc30c84ed390ce63f6fe457ab743ace69082e
Sha256 32391ce6eca836369cfd5b3948ba978b7982dd3a85b81bb33c973773adeaef01
Sha384 083136982e10882929bd5426593ae8c0eb985e3eb1828c53854aa395838d0bafa0d106c1b175a95ebde196d19a0be263
Sha512 896e7ee3f6bbe9fca76b54f42a54fed8b633babb6afe9176d6446c8c64dc2034a2f1943165b057a6d29bda59467b0647c9f5a4878ad9be7f2ad90df8aa9c4596
SSDeep 98304:5fkfDu3M/Gxd2GwI8/AnVBmwka9tDAj0nHFFLOAkGkzdnEVomFHKnP8Y+Iym2sx3:5Gyzxd2191RgdFLOyomFHKnPysJ
TLSH 5F76E4D2E86F42D3E8520633C5BC6B6CD31D6D38BE910067F14B3E15A63E64939AC52B
b8df9a2c000cd9ba4708b646b9547393
Malicious
7z-stream @ 0x002F7BCF.7z
Tin_buồn_PGĐ_Công_ty.pdf.lnk
Malicious
LNK CommandLine
Malicious
[Deobfuscated PS]
Malicious
[PowerShell Command]
Malicious
[Deobfuscated PS]
Malicious
[Lnk Summary]
Malicious
[Deobfuscated PS]
Malicious
[Deobfuscated PS]
Malicious
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
3 / 3
Path arc:zip>lnk~T1027~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd~T1027~T1059.001>scr:ps1~T1027~T1059.001
Shape arc:zip>lnk>lnk:cmd>scr:ps1
malicious 4 nodes
Path arc:zip>lnk~T1027~T1059.001~T1059.003~T1202~T1204.002>scr:ps1~T1027~T1059.001
Shape arc:zip>lnk>scr:ps1
malicious 3 nodes
LNK: Command Execution UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell UNKNWOWNmalicious
"; [Syhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
b8df9a2c000cd9ba4708b646b9547393
Malicious
7z-stream @ 0x002F7BCF.7z
Tin_buồn_PGĐ_Công_ty.pdf.lnk
Malicious
LNK CommandLine
Malicious
[Deobfuscated PS]
Malicious
[PowerShell Command]
Malicious
[Deobfuscated PS]
Malicious
[Lnk Summary]
Malicious
[Deobfuscated PS]
Malicious
[Deobfuscated PS]
Malicious
No malware configuration was found at this point.
LNK: Command Execution UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
b8df9a2c000cd9ba4708b646b9547393 › Tin_buồn_PGĐ_Công_ty.pdf.lnk
Deobfuscated PowerShell UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
b8df9a2c000cd9ba4708b646b9547393 › Tin_buồn_PGĐ_Công_ty.pdf.lnk › LNK CommandLine
Deobfuscated PowerShell UNKNWOWNmalicious
"; [Syhuhuhuhuhuhuhuhuhuhuhu
b8df9a2c000cd9ba4708b646b9547393 › Tin_buồn_PGĐ_Công_ty.pdf.lnk › LNK CommandLine › [PowerShell Command]
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙