Malicious
Malicious
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 f46e0f22fe356bde4c7af2d32da1e493
Sha1 951b0d6655e2207c52a0675aaa82ec9f9fca7e7a
Sha256 e32bb62ce5a4cab7f3451e238e33d5cce8f260925cb835814f2e61bcf5a8483f
Sha384 e34a8029e8d5ee43db5a117ba488cf6b68606f68d8a96f2240c09c97b9139ad4bc93680afdcabdedf6bdfac0e1f08e2a
Sha512 6d0469db803dad05d5fad532d1b8df1315faf24c69408d1ae720c6c3838cecece9d9caa90386f5359ea0eab6d3187d7a58d8dee53375a9cf475b40b121709a27
SSDeep 24:9s/n3HtLyAJz0ZNSYZ9Hl61eZmS+bdWqKHKM+L/nCLAzC:9sfAfZNSYZ9HlZZPeWTHKjfLC
TLSH C721A7B5E111CC07C1CB8DF33DBD0A7BB06574AA696CC4B29E2E64C90E6322C2762565
f46e0f22fe356bde4c7af2d32da1e493
Malicious
photov_857348197437.lnk
Malicious
LNK CommandLine
Malicious
[PowerShell Command]
Malicious
[Deobfuscated PS]
Malicious
[Lnk Summary]
Malicious
videoa_394710167016.mp4
[Lnk Summary]
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd>scr:ps1~T1027~T1059.001
Shape arc:zip>lnk>lnk:cmd>scr:ps1
malicious 4 nodes
Path arc:zip>lnk
Shape arc:zip>lnk
2 nodes
LNK: Command Execution UNKNWOWNmalicious
%COMSPhuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell UNKNWOWNmalicious
$afgf huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
f46e0f22fe356bde4c7af2d32da1e493
Malicious
photov_857348197437.lnk
Malicious
LNK CommandLine
Malicious
[PowerShell Command]
Malicious
[Deobfuscated PS]
Malicious
[Lnk Summary]
Malicious
videoa_394710167016.mp4
[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution UNKNWOWNmalicious
%COMSPhuhuhuhuhuhuhuhuhuhuhu
f46e0f22fe356bde4c7af2d32da1e493 › photov_857348197437.lnk
Deobfuscated PowerShell UNKNWOWNmalicious
$afgf huhuhuhuhuhuhuhuhuhuhu
f46e0f22fe356bde4c7af2d32da1e493 › photov_857348197437.lnk › LNK CommandLine › [PowerShell Command]
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙