Malicious
Malicious
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 c33b5713906b48b0bd6997525b01caa9
Sha1 62d3baf69f255ad8550bd56c1fc62a6992d770f8
Sha256 c7ad3c3bcc7cb4cdc5c586d0415121a07c2694097a6526dee2b261e15fa4ac05
Sha384 7c1eb6ca07f6f1f25f4ae075179c0df6003a82e40e1fdf19311f0ff0e33e306727f0add71759825a70b3f05ffc42e138
Sha512 ae15df1bf9f6d05b9933c53a7735f0f7acb0b78922fd912f696013276adb7a4e61dd8a013dd483897118be1b5f8a93e8afc5f2fffbbb996c6a8cdbc19e837b34
SSDeep 24:9kIVrP6FIEG/U04OBq8tb+8l2mSH6HEbLWqnXn7+8NAQk:9k3FnMq8tb+/PzW47+F
TLSH 8E21B9819299CC91EACEC3F34D5FCDE43A180511611374E7430B0FC86E0FF5D4652A51
c33b5713906b48b0bd6997525b01caa9
Malicious
photov_899246928324.lnk
Malicious
LNK CommandLine
Malicious
[PowerShell Command]
Malicious
[Deobfuscated PS]
Malicious
[Lnk Summary]
Malicious
videoa_697887201166.mp4
[Lnk Summary]
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd>scr:ps1~T1027~T1059.001
Shape arc:zip>lnk>lnk:cmd>scr:ps1
malicious 4 nodes
Path arc:zip>lnk
Shape arc:zip>lnk
2 nodes
LNK: Command Execution UNKNWOWNmalicious
%COMSPhuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell UNKNWOWNmalicious
$sj88 huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
c33b5713906b48b0bd6997525b01caa9
Malicious
photov_899246928324.lnk
Malicious
LNK CommandLine
Malicious
[PowerShell Command]
Malicious
[Deobfuscated PS]
Malicious
[Lnk Summary]
Malicious
videoa_697887201166.mp4
[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution UNKNWOWNmalicious
%COMSPhuhuhuhuhuhuhuhuhuhuhu
c33b5713906b48b0bd6997525b01caa9 › photov_899246928324.lnk
Deobfuscated PowerShell UNKNWOWNmalicious
$sj88 huhuhuhuhuhuhuhuhuhuhu
c33b5713906b48b0bd6997525b01caa9 › photov_899246928324.lnk › LNK CommandLine › [PowerShell Command]
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙