Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 e744ef98f58394f602529e59e2d69b60
Sha1 c051a0c8d65296887fc1acd6b3a846ca64df66d0
Sha256 bce37988e485df1ec7b6407528793c9e72e4a42122120c880113cba5b9fd6b70
Sha384 52429278845a347b5ca8b4a0371753ada471d620734a562884c5592e9b0a66fe84bcf1f404bad2f2d44b4283bd0746a2
Sha512 9c5556312eefd0f685cc6a197c930a28bee56b423d373a329813a22220752c09256577776cb3451f93bb40d1403f9ae5e83d5910993c9dbb88809b58a6e44cc3
SSDeep 48:9xTsPBWDk7J+mwsZYYwwEnMzaSO36yAUUtXuggMRT:4w7s6Yw1MY6Xtp
TLSH 70311D5943CF8C23D443F570B08177ED4EDC425587F9B206B919D4DD3CA6A5026DA11A
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1
bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd
Shape arc:zip>lnk>lnk:cmd
malicious 3 nodes
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
No malware configuration was found at this point.
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
e744ef98f58394f602529e59e2d69b60 › IMG_20260728_111244.jpg.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙