Malicious
Malicious
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 f77acea0344aba66b8cd6e9078b87e3a
Sha1 9c26a2bba76edf0891870dd1bdc7c786a2b43145
Sha256 7f6fd336bcaf1c234ec7dece88d47eee9a29975359faddb87145a2c5d9541c73
Sha384 c8f8d3a4fe0673176c5896fd1b7335f2bf00fd4c14b1323aa35c11d17afb6eb09f97ddf2973cb740f039b78b8d564046
Sha512 0093258040a796d1d008e78fedd35a4d17bea9a54426e26a06921d1f4dba5658777a11e2b6f8986df883cbc8fecf280facbb212d72841b93d0e87e34ace35a40
SSDeep 12:5jsfYO1/8VZZOBoa5vzCPXRcyzm1O8Vwky1OYiAo4/DYJw4xoys7yYObdsm4cO8c:9sf98YoOveCyzmPmZjv/DYJJxE7y6mYt
TLSH EFF0DDA1CE57F180EE85D13264141A0D13608F978309B9876B29380AF9C5AC4E3455E9
f77acea0344aba66b8cd6e9078b87e3a
Malicious
photos-2026c-1106037895593.lnk
Malicious
LNK CommandLine
Malicious
[PowerShell Command]
Malicious
[Deobfuscated PS]
Malicious
[Lnk Summary]
Malicious
[PowerShell Command]
Malicious
[Deobfuscated PS]
Malicious
video-1106037895593.mp4
[Lnk Summary]
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
3 / 3
Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd>scr:ps1~T1027~T1059.001
Shape arc:zip>lnk>lnk:cmd>scr:ps1
malicious 4 nodes
Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>scr:ps1~T1027~T1059.001
Shape arc:zip>lnk>scr:ps1
malicious 3 nodes
LNK: Command Execution UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell UNKNWOWNmalicious
"iex(ihuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell UNKNWOWNmalicious
Invokehuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
f77acea0344aba66b8cd6e9078b87e3a
Malicious
photos-2026c-1106037895593.lnk
Malicious
LNK CommandLine
Malicious
[PowerShell Command]
Malicious
[Deobfuscated PS]
Malicious
[Lnk Summary]
Malicious
[PowerShell Command]
Malicious
[Deobfuscated PS]
Malicious
video-1106037895593.mp4
[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
f77acea0344aba66b8cd6e9078b87e3a › photos-2026c-1106037895593.lnk
Deobfuscated PowerShell UNKNWOWNmalicious
"iex(ihuhuhuhuhuhuhuhuhuhuhu
f77acea0344aba66b8cd6e9078b87e3a › photos-2026c-1106037895593.lnk › [Lnk Summary] › [PowerShell Command]
Deobfuscated PowerShell UNKNWOWNmalicious
Invokehuhuhuhuhuhuhuhuhuhuhu
f77acea0344aba66b8cd6e9078b87e3a › photos-2026c-1106037895593.lnk › LNK CommandLine › [PowerShell Command]
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙