Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 ebbc6b538ecb77db52b94e4b57059cc0
Sha1 b251dd00e64e5ebd5ceaee6dcddd6b0631a1fc74
Sha256 cc15aee9a90b096fda07c9f5f46a9191c756371c435f1ce57f561db22b5aabc1
Sha384 5e7b9107bd5d4ec6f1215ae43b02598694d85bef11897eebd0315d5402d64cc8e1a00188ff88fb3b248df764920d8bee
Sha512 a6e25fea2bff31c8b4c38f54ddbaa4900c90f5b114ccd0fd84fcfdea7719df7be70b3bc044bd2cecd3cefba83644db45d7a0a0fed4a319c66757cbbc9d047154
SSDeep 96:8LCmBQVuyG1QyjVGyaMBQVuj1jQ2GQR2GyaMBQVuyFgGWzjyaxSBQ5vfUJZ1AzFH:83BQVuyG1QyjVGytBQVuj1jQ2GQR2Gym
TLSH D4C124901EDF10CDE2364FB103CAB5BE0796E4B0CE5E6DB012C14A2156F7D86E939BA4
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path lnk~T1059.001~T1059.003~T1202~T1204.002~T1218>lnk:cmd
Shape lnk>lnk:cmd
malicious 2 nodes
Path lnk~T1059.001~T1059.003~T1202~T1204.002~T1218>scr:ps1~T1027~T1059.001
Shape lnk>scr:ps1
malicious 2 nodes
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙