Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 ef7bd01e762b6b19455c683464b8a24a
Sha1 6a305e1b292df5b4ce1e9e0faad9d0227ad21e85
Sha256 6d55bcc0aaf8d70c74c6fe47d8bf5d62fb0daf5fa22a61bd26226dcd1ccfacb5
Sha384 22461784516e9587142434ab7522c93059bde91334f00122545c4496aa68d3502b600b6c9fcc04f794a9f7a2ac441106
Sha512 2fb5a88654a686ea068e1b9e8ba6e7f788db80f2a0bef8914b3a251d143369b8ee706c3241262b7a0b00e5f28cfc7be77c03469f1cbfab438f3ba1399bcec14b
SSDeep 96:U04bglqoM4UAP6Wtp2uCasvysHo3SOSsW6oreq:xVlFUAiWtpYasvxH+HW6o6q
TLSH B6715C2188437364D53FFAB790EE058B4A7802450F5E4D48EA4D4FDC6C862A3136211D
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1
bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd
Shape arc:zip>lnk>lnk:cmd
malicious 3 nodes
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
No malware configuration was found at this point.
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
ef7bd01e762b6b19455c683464b8a24a › IMG_20260725_043241.jpg.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙