Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 f320ec3e431643241f7aceaa4467a6bc
Sha1 4dc5d1669df004be0742479f3bb2e2f567d86033
Sha256 85ff7c9dbde01719d0d40980dad9d4f9f869e47f5dc48a9500f5d49a91d1aba7
Sha384 5146cc0a3d494b5ffbf4f54904c0676a2adeaebcd3441d787cc521bb0bffe5be7d52284c4e197db7babad3efb3a98077
Sha512 9c75aa881d8eb5c45f8506cdd5229bbf70c72ca57088f9fd692abb14898b96c9a4608bd345e3a6175aca4699bc16f4d1a23468190b5b7643e1c7ba921f76b5df
SSDeep 384:pkzU/k1acgA8NfFK56o4M3xpEQHkKAbfiQrA93EqJFPQAwBW:pwU2aq8C56oJTERro93EqNGW
TLSH 8052B081933247CDF99676E90E2E3CA6C3A51F65C1CF16A98F94830871D86054A3389B
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1
bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd
Shape arc:zip>lnk>lnk:cmd
malicious 3 nodes
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
No malware configuration was found at this point.
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
f320ec3e431643241f7aceaa4467a6bc › IMG_20260724_105315.jpg.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙