Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 d90ac70a006d5ab9a03b9de02c0b041c
Sha1 495b912cfe0dba5a4725ca7d6f3e61660ad88559
Sha256 7e86d2e6aa06652909d4a7e754f8ff5d2908a93d63bcea204e870fb4c1e656be
Sha384 75644b8cf5e4dc3f29690b0beda512362c57bc05a65d24d2022499c9aff79b4d3858bfa80776a6127056f3707baf0e2a
Sha512 2a7d9a96eda1b695ed7b7d01fc000690657b12d5f21275322004e8ebdd2cef03b619e99b0ac0050273f7f7b92553ff0a0c9597c4d13398291abe7927a4d85bc0
SSDeep 48:9WrzNEysGx8yqnSGjzPic8uWsRJH9HSSScYGmGKONB9Bsj9fdo:wrzNEMxTqnnzPi5DsRJH9HSyYzGKOZYo
TLSH C251392B82283142DEBB84318C9D9C85BB6850F8A92BDEE5B59DD0ACE536D0206135D9
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1
bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd
Shape arc:zip>lnk>lnk:cmd
malicious 3 nodes
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
No malware configuration was found at this point.
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
d90ac70a006d5ab9a03b9de02c0b041c › IMG_20260724_175014.jpg.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙