Malicious
Malicious
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 e7d14a301bef41d36f7de8b0a7fe523e
Sha1 19b1ec1802e3b2324eba7add6898026c99085699
Sha256 e0cbbb0d0b53509ccae1da6ea6f1b084c20d72e8723b98bb2aa5cced01f7b414
Sha384 7a7e69d3e8f0e12f19050523038dbc88b1f74934e730ede648a3ffa0b5a10f218ffcf761f7b09135d742dce21822c4f2
Sha512 6e11c7c670130ddd725432aefae263f7350a7fd32ff595d2a21e2204893152cd8430fd6e4aec154a67d5c10a8b093ecadf3f0b3b7a20d585ebc62a019d0d46dc
SSDeep 6:4xti9X3X3/lKolHKlFcnlj+SEEgykQLPfBMlpIoF6SaU/k1ARokJxt:8ol04QkCikQLhMbHFMf8
TLSH 0911C2251BCA4E00E2F5AB34BC38960119A87C6C8D314A8D0286195C0C26A209A75F36
e7d14a301bef41d36f7de8b0a7fe523e
Malicious
LNK CommandLine
Malicious
[PowerShell Command]
Malicious
[Deobfuscated PS]
Malicious
[Lnk Summary]
Malicious
[PowerShell Command]
Malicious
[Deobfuscated PS]
Malicious
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd>scr:ps1~T1027~T1059.001
Shape lnk>lnk:cmd>scr:ps1
malicious 3 nodes
Path lnk~T1059.001~T1059.003~T1202~T1204.002>scr:ps1~T1027~T1059.001
Shape lnk>scr:ps1
malicious 2 nodes
LNK: Command Execution UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell UNKNWOWNmalicious
"iex(ihuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell UNKNWOWNmalicious
Invokehuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
e7d14a301bef41d36f7de8b0a7fe523e
Malicious
LNK CommandLine
Malicious
[PowerShell Command]
Malicious
[Deobfuscated PS]
Malicious
[Lnk Summary]
Malicious
[PowerShell Command]
Malicious
[Deobfuscated PS]
Malicious
No malware configuration was found at this point.
LNK: Command Execution UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
e7d14a301bef41d36f7de8b0a7fe523e
Deobfuscated PowerShell UNKNWOWNmalicious
"iex(ihuhuhuhuhuhuhuhuhuhuhu
e7d14a301bef41d36f7de8b0a7fe523e › [Lnk Summary] › [PowerShell Command]
Deobfuscated PowerShell UNKNWOWNmalicious
Invokehuhuhuhuhuhuhuhuhuhuhu
e7d14a301bef41d36f7de8b0a7fe523e › LNK CommandLine › [PowerShell Command]
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙