Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 587701b1047b53c2b0a8976e0dbaaba6
Sha1 f2fd127b76f49c88a4ac5a6a27434567f45002f0
Sha256 87fa3911f7c6ba14faadefd5cc1a0ec29c176fc3858a1addd391bc4099860e6f
Sha384 bef88b69e3b3925ff15c4623ae9ebe06a3a12422dd734835328b21561e2e38d4035a05ab8e2c371b81952d339b46440a
Sha512 9edc2045a99ceef2d25f9ae53c8d4c85b0f87702fe8a56ad161a125cb32013307c9836a8ac844d8068672d88285f9ee70c145b172c81115a86248af57fd6fa32
SSDeep 384:+HmNqQDWqI3lydYBaFYRci4yKtq1t78OEcGLdreGNPmGXX:+HmNqb1ydYBaF5ifIzcGLdrPmGXX
TLSH D062CF2A42171ED2FFEBF8F594BB2D526182F550C15807A8EC6E2C494F11841B9633DD
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1
bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd
Shape arc:zip>lnk>lnk:cmd
malicious 3 nodes
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
No malware configuration was found at this point.
LNK: Command Execution UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
587701b1047b53c2b0a8976e0dbaaba6 › IMG_20260724_141910.jpg.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙