Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 f1aeeb958eabb3255e58a224290a37d3
Sha1 b5be1cf720f547e8625efa8bf2a41746e6ea562a
Sha256 f267dc29f50050bb7abf669b8a8a1cc422b0d88f36257c38a88620da8d04363f
Sha384 7725c60e660db951e2e140492284ca8d13376e7ec3264c06eb9f17d00c4e6ff8c453c55e22ab90c8f9a3dc88774bc897
Sha512 b8cd23d5f3f5c472761981ee1e9e4e685442dc260b20f6fb77c86499f42a085aab5123af03a58d5200007ad18402a26a895cebe31c4c42d368c27194c21d4e60
SSDeep 48:9KqVNTs5bqMWOvl1hrTjWUQwxD6/QioD2at8dx:vVNQ5bXhV2ixu/4Ax
TLSH 5931FAC95B63D02FE8EFEE3108670F651783AC4AFC425417AA9C121DB6683BF4C43199
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1
bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd
Shape arc:zip>lnk>lnk:cmd
malicious 3 nodes
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
No malware configuration was found at this point.
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
f1aeeb958eabb3255e58a224290a37d3 › IMG_20260728_023509.jpg.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙