Malicious
Malicious
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 ba109362e9a98b65761041a92f46e9d1
Sha1 6a30740ca02c1aa44fe00e511348614245346bfc
Sha256 e7f36ff4274b1fa4afb48a002b85aed82d788a399b0db3d5a4e886238777fb37
Sha384 f05f31276c9203e17c15a8d17263925e3d76eaa574ed35079c0f0a609a548d9c5b79c3f8efada75944c87d7b1f6e92ce
Sha512 9be7c39bc851851b1aae7d9dd9ac301dc1fcd4003ed0661d9da37f4e44d63238962ce45a5cbba22a99ac22b9596eed6babe7d1bc539f2427da165d84a64e81cc
SSDeep 768:wSN7u11CTYLfuI1XrhCZDx2HT7TKjntRqoRs0WQS90i73ErsOToBZE06/6DL5z3:wv40LfuI1bhCZduGjnrxS90i70TiZE0L
TLSH E2232912CE9F2D40CB6842BBA1CF05E5195D079F32A20DCF269BF740EE5B4B521D5AE4
ba109362e9a98b65761041a92f46e9d1
Malicious
LNK CommandLine
Malicious
[Deobfuscated PS]
Malicious
[Deobfuscated PS]
Malicious
[Lnk Summary]
Malicious
[Deobfuscated PS]
Malicious
[Deobfuscated PS]
Malicious
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path lnk~T1027~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd~T1027~T1059.001
Shape lnk>lnk:cmd
malicious 2 nodes
Path lnk~T1027~T1059.001~T1059.003~T1202~T1204.002>scr:ps1~T1027~T1059.001
Shape lnk>scr:ps1
malicious 2 nodes
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell UNKNWOWNmalicious
-ep "huhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell UNKNWOWNmalicious
-ep "huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
ba109362e9a98b65761041a92f46e9d1
Malicious
LNK CommandLine
Malicious
[Deobfuscated PS]
Malicious
[Deobfuscated PS]
Malicious
[Lnk Summary]
Malicious
[Deobfuscated PS]
Malicious
[Deobfuscated PS]
Malicious
No malware configuration was found at this point.
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
ba109362e9a98b65761041a92f46e9d1
Deobfuscated PowerShell UNKNWOWNmalicious
-ep "huhuhuhuhuhuhuhuhuhuhu
ba109362e9a98b65761041a92f46e9d1 › LNK CommandLine
Deobfuscated PowerShell UNKNWOWNmalicious
-ep "huhuhuhuhuhuhuhuhuhuhu
ba109362e9a98b65761041a92f46e9d1 › LNK CommandLine › [Deobfuscated PS]
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙