Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 d78afb02ecba2320a4ab86b32a52c255
Sha1 87d4b11de192d89bf9f32fc2270980510e9bb274
Sha256 3d3bf68e1abd08665eaa0c0b9223038d6051d0b36a127eb4fc309a8bb9595dbe
Sha384 2363d88d189991d03db263a43650df38081f9154cac90544b3e36402227c2374f03831fefd0d8c8b6e80f8c7cf2d660c
Sha512 64533dda615b72ab4a6909a81d0080336781c5e25d9f6176d54f791aa498531250a53a64f12804e7aa7899a636d46fbc08b2be6370e3dadc14e1c461056036b2
SSDeep 48:96UqPfFTLaiS4rb5JjoLN8TvpOEoZo21NC6T47Uobbps2l:UNPdTOiDrb5J48Tv+Zot6Tqb1sC
TLSH B6412AA604D0968CCA0BCA30815E6D888A1CA036931996ABDF66C26843C07F3A547564
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1
bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd
Shape arc:zip>lnk>lnk:cmd
malicious 3 nodes
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
No malware configuration was found at this point.
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
d78afb02ecba2320a4ab86b32a52c255 › IMG_20260724_120023.jpg.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙