Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 c85ef51f9c0528dfb2edaa12aa784aa3
Sha1 ae73ed8d8d4973c26cbe1c0719aec10ae1ca0518
Sha256 fbf5bd493097f2202af7b1b2bfae3f7267a6f1b4e1da3036c495c805dda253c5
Sha384 96d7273b3216c5343ad594c61ce6636caa206c16f0b1557d2d10a564e75677746f8f1893e7c43d868836a35165e70be3
Sha512 034d123e8c361711fd19f28acde5857039a568d1d45b187e049bb504651867909d52314d31ddef6de3c5731b53ecea992113a0da7a13963c8b0761262b9097c7
SSDeep 96:/mAVY2+hMo202xkp47yEGV1MvYANsjBulAHSNCuHv7/5Wqo7uvFz0GhpXO1VUMYD:/bPhod347yxvMvs9ulAiCUv0/MqGhSYD
TLSH ABB19F33815634FECF53A63991EF57BE49855AE316DEC72634D84C390A029852006E6F
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1
bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd
Shape arc:zip>lnk>lnk:cmd
malicious 3 nodes
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
No malware configuration was found at this point.
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
c85ef51f9c0528dfb2edaa12aa784aa3 › IMG_20260724_162720.jpg.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙