Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 0fb5130380004263adeff8c311bf6f65
Sha1 ee0c4a9766338152a1a96a2c06376817cba4d915
Sha256 e7552799c3c15c3e3fdf93c3cc2dc04beec2c396cf6dd0d5c960c42778dac1ff
Sha384 cf35b2edd789861a61879d139b5ac4192f51d43cebbaa256f1c3c8df6d44bef351559aa3106d6e76e7423d172eca1cf8
Sha512 468cc8cd91abf84581d7399843276cec30ff0a37f4a652bcf7f983f4ea8afd1f9576d0bcc9909bf1d9b9e6ba641ed1d43268954d0da8f4ee20153032f13bf9f8
SSDeep 24576:GKDH+e3v+21sDWudupORl0eeRy4GuIW7zX8gI8Rk+UFrYxupg:TDey+Uuks/0vylW7zX8gI8+FrYxue
TLSH 28A5D119978BE5B7C19C5170615F8BAF7AB185DE06A1830AC3668C6E2CD3FC47F61E02
Overlay_e9234b6a.bin
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.xdata
.idata
.reloc
.symtab
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>pe:exe~T1027~T1055>bin
Shape arc:zip>pe:exe>bin
malicious 3 nodes
Overlay_e9234b6a.bin
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.xdata
.idata
.reloc
.symtab
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙