Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 dcf289a28462cf499cd626b2581624cd
Sha1 7f4d85de20b1fe6d9eef5cdabcdab0aa1d9b0818
Sha256 ba80c377216f5d9c4792febed1f0b240f6c9fda5ca0a60b949459476d7bcce76
Sha384 abe0fb30cca836b86039118101acd75cef6be83a663eae8837d5d7c50e59feb96b8a4454fa6b740342949ba36ef17791
Sha512 ae0470c9cecad4b99fb4095a8ad78676fbea56168732cd39458ac85780701a827b66975ae92390b5f84a882e8e424ed808d94f0e742587673ce855bbd96d4242
SSDeep 48:9xHOJ3zR+NU/skd6xUGOA+EUpxzlKCAHtT:uJ4AF6lrhwzlKN
TLSH 1F41F9E8265D0AF9C922457D70CBD538271D4E22992AD54F371C92630E5036DAE1B199
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1
bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd
Shape arc:zip>lnk>lnk:cmd
malicious 3 nodes
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
No malware configuration was found at this point.
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
dcf289a28462cf499cd626b2581624cd › IMG_20260725_080207.jpg.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙