Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 cbb40a56a15b93fc2dde645a75dcd827
Sha1 6f85b3586e60dc435682fddd75d7bf1961d94f4f
Sha256 4dfe2b09c6959f01eb1b181cb41242d7ea1508bf8b0d5a3bdfca4b9a40fb21f4
Sha384 16ea81047e8532cf006fa3c7a045f0bfda78ce5b07d7470908167edb1acc7568603930da14c415b78130455f32d95e84
Sha512 29cfded8deab8b274f8b737e32e9a3813048d43c3e058057cdff84fdb21f3f69544df92a91cbcb5d1a06e87d45f599e43ff57c8f6152e6f15c4680cbfe0b6fa0
SSDeep 48:9kG/aBdwoYKl7ari93ctQP5DWS3BRH/uoUHnYukGzy6ibjM4vRsowj:PCjbJQitctgDWsKYuk7HM4vg
TLSH 23412C1B0B4780A3C2D6F9BF8C5209A9A55DD4F32943154F77CAD2BE85D3423B61D54C
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1
bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd
Shape arc:zip>lnk>lnk:cmd
malicious 3 nodes
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
No malware configuration was found at this point.
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
cbb40a56a15b93fc2dde645a75dcd827 › IMG_20260727_174216.jpg.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙