Malicious
Malicious
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 e768f88d8f6b01f5c80003fac64a34f3
Sha1 e42da40d5803f0ee189a965a4d98f4b07c6e5fd2
Sha256 db692efe262d1cff65404d339854a925aa7e0ab2a8f2d4ada56ca6956278362b
Sha384 21e4fb0229059380549b4e73036718b0319a627b290cfba2fdde713015aa86cf471b60630520c94515c05d2b48de6af8
Sha512 b333b02380b4b3f98165f3c6d989722c4096f68bee24997b8bbfb9e56a2d28c3fadaa490ad955de0eba1068e20cdb5824d9b7b7ce31f8a6068a7058cd1aabfb6
SSDeep 24:9JIVz+guM2e0TGJg+wIpiUdRCjBJ7wCemk+A4P/OINo6y3glN0m:9JIkgSygEpit8T+3Zo6y3gYm
TLSH 8F21D864134952F7CD11D1B4AD44A16A1130AA5E0CCED6A279A2216BBC1BB4E6B29D88
e768f88d8f6b01f5c80003fac64a34f3
Malicious
photov_401530842369.lnk
Malicious
LNK CommandLine
Malicious
[PowerShell Command]
Malicious
[Deobfuscated PS]
Malicious
[Lnk Summary]
Malicious
videoa_570787930194.mp4
[Lnk Summary]
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd>scr:ps1~T1027~T1059.001
Shape arc:zip>lnk>lnk:cmd>scr:ps1
malicious 4 nodes
Path arc:zip>lnk
Shape arc:zip>lnk
2 nodes
LNK: Command Execution UNKNWOWNmalicious
%COMSPhuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell UNKNWOWNmalicious
$a9jh3huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
e768f88d8f6b01f5c80003fac64a34f3
Malicious
photov_401530842369.lnk
Malicious
LNK CommandLine
Malicious
[PowerShell Command]
Malicious
[Deobfuscated PS]
Malicious
[Lnk Summary]
Malicious
videoa_570787930194.mp4
[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution UNKNWOWNmalicious
%COMSPhuhuhuhuhuhuhuhuhuhuhu
e768f88d8f6b01f5c80003fac64a34f3 › photov_401530842369.lnk
Deobfuscated PowerShell UNKNWOWNmalicious
$a9jh3huhuhuhuhuhuhuhuhuhuhu
e768f88d8f6b01f5c80003fac64a34f3 › photov_401530842369.lnk › LNK CommandLine › [PowerShell Command]
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙