Malicious
Malicious
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 c22f745b6cf425bb47691fe2822e5af1
Sha1 884df1e44e6ceec6d874091cf789ab83047bd694
Sha256 82b6f8b1671bfcebe13007d11ba79e06554b260b3d610b4a2a721d12f7ec3f96
Sha384 0454cdd41cc57f40c446eefa2538f523ffd494c0e48c4d1d819e671b8bd3c0cfbd32754714a6d74a2efd54c7edea772e
Sha512 1bbb33a37254805f4cc0119dcb257d515fabe60792e6fe97e4ef3c3536d759037db013cb6fc4b7b09d09424f5f66cd581979cf19731383a31350d790f5a50dd5
SSDeep 768:G9K8BaOVRLdXzXJA0BWuLPO99oaUurCgsD0HX4UaFgTWHP:G9K8BxVzraw3OIZurg0HIUmggP
TLSH 59F2D022DE9314C2CE5962FB68079519F580CB0E8A5B3DC9E74D944D0F928772FAC3A7
c22f745b6cf425bb47691fe2822e5af1
Malicious
CKH Procurement Drawings and Bill of Materials
Malicious
demo.mp4.lnk
Malicious
[Lnk Summary]
Malicious
No. 1.png.lnk
Malicious
[Lnk Summary]
Malicious
Purchase List .txt.lnk
Malicious
[Lnk Summary]
Malicious
Rlocal.hta
Malicious
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>lnk~T1059.003~T1202~T1204.002~T1218
Shape arc:zip>lnk
malicious 2 nodes
Path arc:zip>scr:vbs~T1027~T1059.005
Shape arc:zip>scr:vbs
technique2 nodes
LNK: Command Execution UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
c22f745b6cf425bb47691fe2822e5af1
Malicious
CKH Procurement Drawings and Bill of Materials
Malicious
demo.mp4.lnk
Malicious
[Lnk Summary]
Malicious
No. 1.png.lnk
Malicious
[Lnk Summary]
Malicious
Purchase List .txt.lnk
Malicious
[Lnk Summary]
Malicious
Rlocal.hta
Malicious
No malware configuration was found at this point.
LNK: Command Execution UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
c22f745b6cf425bb47691fe2822e5af1 › CKH Procurement Drawings and Bill of Materials › demo.mp4.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙