Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 f1bce33ab135e0e89cfe526d030f86b4
Sha1 9d3ac68da9e73a118aa95128ec3a0ac2ce44ffe8
Sha256 9592e5f65c1ca01c08736474db04849fe0172113e4eea1c70a9e8e1c7fbd4076
Sha384 eaa17add856f311f75cf3e5bcba6b18328472718b0ca740cc6553d8714275516a003b9d0e9c6a4765a9d1317941d52bb
Sha512 bf4b9aed7c22a5a5bee547bea87cab9cadf53ea8325ac75bbef34f1aafef7e58884d6393067f0c6f77b5c57832d5666c3574e2263f09760773090b54f57136ff
SSDeep 192:vkP710hCM1rWUdWqDyVFSD2HQLcaqVz4WH9mEl8Hdp29Zb8:vkPWCsnKFSuB99Z0LyZQ
TLSH A802AF609A280F13DBDDADE1D2BE6C04722FBA8EA858F45246D43778D41E7C716414CE
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1
bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd
Shape arc:zip>lnk>lnk:cmd
malicious 3 nodes
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
No malware configuration was found at this point.
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
f1bce33ab135e0e89cfe526d030f86b4 › IMG_20260727_205736.jpg.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙