Malicious
Malicious
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 d54ca1c035df6b8abf7e8f481059e800
Sha1 aa8092ca625ac707b01daaaf521c18a6810baa35
Sha256 36b86fc4dbfabc7de28b5e0293f378b72dbb2b5b5d25351c6ff125bc46e7079a
Sha384 36e3aa7a308cfc56d87f7472574a4b2aab31f02be5fee9a662ff2039a98de74816e2eabf8e8f91668e2f5eed5c16c15f
Sha512 cc1938c29c2116452794b4720e5f4392ed87e567d90aa8e2169ecc02b9aaf05fa6afbb7e38f51eb84286e63bebf30adc42e8f27b860ef2b4e51c78d817cc9749
SSDeep 6:4xtiU5Yzqyzqy/0hkKlFcnlj+SEEgykQLPfBMlpIZe6SaU/k1ARokJxt:8oU19kCikQLhMb2eMf8
TLSH 6511C2251FEF0A00E2F65A34ECB8966129307C0C8A31065D0380182C4CE2A18DC36F32
d54ca1c035df6b8abf7e8f481059e800
Malicious
LNK CommandLine
Malicious
[PowerShell Command]
Malicious
[Deobfuscated PS]
Malicious
[Lnk Summary]
Malicious
[PowerShell Command]
Malicious
[Deobfuscated PS]
Malicious
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd>scr:ps1~T1027~T1059.001
Shape lnk>lnk:cmd>scr:ps1
malicious 3 nodes
Path lnk~T1059.001~T1059.003~T1202~T1204.002>scr:ps1~T1027~T1059.001
Shape lnk>scr:ps1
malicious 2 nodes
LNK: Command Execution UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell UNKNWOWNmalicious
"iex(ihuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell UNKNWOWNmalicious
Invokehuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
d54ca1c035df6b8abf7e8f481059e800
Malicious
LNK CommandLine
Malicious
[PowerShell Command]
Malicious
[Deobfuscated PS]
Malicious
[Lnk Summary]
Malicious
[PowerShell Command]
Malicious
[Deobfuscated PS]
Malicious
No malware configuration was found at this point.
LNK: Command Execution UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
d54ca1c035df6b8abf7e8f481059e800
Deobfuscated PowerShell UNKNWOWNmalicious
"iex(ihuhuhuhuhuhuhuhuhuhuhu
d54ca1c035df6b8abf7e8f481059e800 › [Lnk Summary] › [PowerShell Command]
Deobfuscated PowerShell UNKNWOWNmalicious
Invokehuhuhuhuhuhuhuhuhuhuhu
d54ca1c035df6b8abf7e8f481059e800 › LNK CommandLine › [PowerShell Command]
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙