Malicious
Malicious
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 e5fc0547a1a8802d3196abd82c35ff6c
Sha1 59828c00d5f8cd488184d85c4ef17aaca0830c3f
Sha256 cee5f4234344c49796812e11c5b14c68089c09ee1c772e71ff1cc296a26925ca
Sha384 ad350606696a84265d4a963d214a6ed3de9eeb60ec8e2dfc52f1e74696f38239db759bacf1829e94785eb9139a16dffb
Sha512 8b06ddaca0ba8224999a3269ae5d809debcc982509e313564cb700cae94e2d008366e463863f06a975779249a35f38b00e929847232acd81a3cb73972c9a0a90
SSDeep 24:8E/BHYVKVWf+/CW55irVueUMkW+wlRgUoIbPOF3+/QT4I02YhX:8A5acoueHGwlRgBIbPOF3fMI
TLSH 77410A146AE60714E2B3CB3D6CBAF21189767C46EE51CFDD019191885424614F975F3F
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd
Shape lnk>lnk:cmd
malicious 2 nodes
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
No malware configuration was found at this point.
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
e5fc0547a1a8802d3196abd82c35ff6c
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙