Suspicious
Suspect

0b190780fce508f11d028a2464194038

Share on LinkedIn
Print
PE Executable
MD5: 0b190780fce508f11d028a2464194038
Size: 3.19 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 0b190780fce508f11d028a2464194038
Sha1 47983b82f1f4af254e128fee7c1e87d94e1bced7
Sha256 fa893f8c48a1619d9eeff82c13371b2b73475151f98d3ee62422bf82bd43cc3b
Sha384 29fcb27ed6eda9a9cad227252b323510665dfa91649a0d5db37067820b63d35573b51dfc7d9cb164629485c0d2b9509b
Sha512 ce9b0a6ef3e53aa94aed70c2128d16479ffddf1fbaea49ba7ff1aabb845ee76e34bb946e69c6cdcbf2be6c3020158f453ebe178e3c37b507a973613da1c9cf20
SSDeep 49152:LwnpWy90JxLL8Q8/QogtTDeaLjqcZz+WvALVPjm2jj0ujBT7PfWa:L+Wtzv8bSahPaxoW
TLSH E5E5BE43E69980E8C59BC07CC7279626EA33B88D4B30B6DFA7D40A113E67B905F2D754
PeID
Microsoft Visual C++ 8.0Microsoft Visual C++ 8.0 (DLL)Microsoft Visual C++ v6.0 DLLPrivate EXE Protector V2.30-V2.3X -> SetiSoft Team
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.reloc
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path pe:exe
Shape pe:exe
1 nodes
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
PDB Path: collector.pdb
An error has occurred. This application may no longer respond until reloaded. Reload 🗙