Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 faa2e02a0bfc9a94117cb4cd5f281829
Sha1 b4e650340077519842773626b4b1c3760964eb28
Sha256 fe8277705549324d8fdb94cc7d9a9083190f3e93e8e5dfec582b5afa5d42c97d
Sha384 6a78a78db2fef840f82b76942d20b5874dcbb9c18ff0e7dc185b28f8f743125e23de3ce8076acc5a6647510d6c220a1b
Sha512 c6ca89fd9aa3b18569d926c2f95d5b7441d221a8845ca7af31f44786da61646692b98ddbf0dec0a4568305c461564f648d1fdd3049a082704df20ee9c7713737
SSDeep 24:9EBVgbtW/x6/7eco5ILyuIhzyAG7ouxj9VkvhSqXhubSuRzSrf1C0pQ/FiV+oLel:9dJWk/7Ro5KN7ouxjcjxuJzSrf1CpFQ6
TLSH D2219650DAE40A20DEC6977D267D1FA011646528BC0FDBDBB8060247A76374D1BC3D16
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd
Shape arc:zip>lnk>lnk:cmd
malicious 3 nodes
Path arc:zip>lnk
Shape arc:zip>lnk
2 nodes
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
No malware configuration was found at this point.
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
faa2e02a0bfc9a94117cb4cd5f281829 › photo_287742060718.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙