Malicious
Malicious
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 f7fbed8735964ec0c599fa142e942163
Sha1 fa3704d9bb18fb0e480c7313d015608f52005375
Sha256 7400f7aac37cda0c5d39195928cd89a48039ae12a4910260b2acbef79cb20997
Sha384 ee82554a9de74eee854b5cb369f17624b508fdf548c9be848821e249c6b6d834e046f0bf2fa30189ba4de62d2a2faf4c
Sha512 8547f6f61fd56d7b2d7d556dd806b57fa1b2b80b89537816d5fa6bd9f03d5e9809df2e3f2190e0bfdb20c616f505c15fc68b615e35f66876c5df21f4be3fcaff
SSDeep 24:9oDghrS2SkdC7uRQg5FRDpZnFcmScWH5G3Adj3:9oIrrSkEWQgdFcPmST
TLSH 6321B7D9482DCD96C6268EBB5E22490621386446570062A1F38FAAF12DCE14C726A364
f7fbed8735964ec0c599fa142e942163
Malicious
photov_698290322043.lnk
Malicious
LNK CommandLine
Malicious
[PowerShell Command]
Malicious
[Deobfuscated PS]
Malicious
[Lnk Summary]
Malicious
videoa_405718242202.mp4
[Lnk Summary]
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd>scr:ps1~T1027~T1059.001
Shape arc:zip>lnk>lnk:cmd>scr:ps1
malicious 4 nodes
Path arc:zip>lnk
Shape arc:zip>lnk
2 nodes
LNK: Command Execution UNKNWOWNmalicious
%COMSPhuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell UNKNWOWNmalicious
$usfx6huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
f7fbed8735964ec0c599fa142e942163
Malicious
photov_698290322043.lnk
Malicious
LNK CommandLine
Malicious
[PowerShell Command]
Malicious
[Deobfuscated PS]
Malicious
[Lnk Summary]
Malicious
videoa_405718242202.mp4
[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution UNKNWOWNmalicious
%COMSPhuhuhuhuhuhuhuhuhuhuhu
f7fbed8735964ec0c599fa142e942163 › photov_698290322043.lnk
Deobfuscated PowerShell UNKNWOWNmalicious
$usfx6huhuhuhuhuhuhuhuhuhuhu
f7fbed8735964ec0c599fa142e942163 › photov_698290322043.lnk › LNK CommandLine › [PowerShell Command]
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙