Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 dc4d962b312a55162ff130e222b9ab1f
Sha1 4840f5f2d98c91c7288a8be4c2876ab7d9fbfc73
Sha256 4a0c77e8d240cebd1d8bbabd14f8a815d35d561cc037f94d9c3acb9da21c41e3
Sha384 654d18ade0d49959a30c18a9a7d17b86d99c6b7d44051680b69bf0187da7f1fd8ab592878fc5ab09db074cca41026629
Sha512 36645e227a8c1b987bee4bd66bf1cf51be6d85aada055c8c37546fe27a4f40af4b2b3dd42bbb09457308a0ca8eba1f72d8e0afa40838ffb86be108cf8d843da0
SSDeep 192:puSUpExoTlUReiW47X8Lv4n+Ec/Rty21f8UYKCWvrh8YMtQ0ttT5r+:pulpz+hr8LvZRUUYnCAp+
TLSH 0B42B020EF47F931E6E5457104F6786CBA0593B6DD82EA5E8167560CE3B04FB15CA83C
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1
bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd
Shape arc:zip>lnk>lnk:cmd
malicious 3 nodes
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
No malware configuration was found at this point.
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
dc4d962b312a55162ff130e222b9ab1f › IMG_20260728_004931.jpg.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙