Suspicious
Suspect

0b190780fce508f11d028a2464194038

PE Executable
MD5: 0b190780fce508f11d028a2464194038
Size: 3.19 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 0b190780fce508f11d028a2464194038
Sha1 47983b82f1f4af254e128fee7c1e87d94e1bced7
Sha256 fa893f8c48a1619d9eeff82c13371b2b73475151f98d3ee62422bf82bd43cc3b
Sha384 29fcb27ed6eda9a9cad227252b323510665dfa91649a0d5db37067820b63d35573b51dfc7d9cb164629485c0d2b9509b
Sha512 ce9b0a6ef3e53aa94aed70c2128d16479ffddf1fbaea49ba7ff1aabb845ee76e34bb946e69c6cdcbf2be6c3020158f453ebe178e3c37b507a973613da1c9cf20
SSDeep 49152:LwnpWy90JxLL8Q8/QogtTDeaLjqcZz+WvALVPjm2jj0ujBT7PfWa:L+Wtzv8bSahPaxoW
TLSH E5E5BE43E69980E8C59BC07CC7279626EA33B88D4B30B6DFA7D40A113E67B905F2D754
PeID
Microsoft Visual C++ 8.0Microsoft Visual C++ 8.0 (DLL)Microsoft Visual C++ v6.0 DLLPrivate EXE Protector V2.30-V2.3X -> SetiSoft Team
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.reloc
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path pe:exe
Shape pe:exe
1 nodes
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
PDB Path: collector.pdb
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.reloc
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙