Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 bc097f2c167aa2e735d09413569cbf82
Sha1 7a29377655492f6d0429c7bac14aebec13fff63c
Sha256 528b5406867eab28cd8227fec4b374c512cd9fa6931b654e2c6278050c86ebfd
Sha384 e34846372f48e73e376f61b019de776b39c99ddc263413d18f1f3cd58fb9c5ef3363f43a6b76a4a07973e76814eca9f6
Sha512 e01393ae7814477aa14bc685628d0c9585e75f27f3117ca15146d4009e6f5af4505611dbf485a583e7e560cef96a10713d21d423d1ff41cc50b88ef7a619477f
SSDeep 384:zNaoUN7rvieaWfR4ykjKbBfV8qzSnr2V8bDwZewt:RaoUN7bieaWJ4yRdfV8Nr9IZt
TLSH AF72C0F4D543B128F5B02539FB8D7161AB80595B93C67017D6562068398C4EFB33E7D4
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1
bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd
Shape arc:zip>lnk>lnk:cmd
malicious 3 nodes
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
No malware configuration was found at this point.
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
bc097f2c167aa2e735d09413569cbf82 › IMG_20260725_070444.jpg.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙