Suspicious
Suspect

0ff786c3b22c708b3c212e75eca8d0ed

PE Executable
MD5: 0ff786c3b22c708b3c212e75eca8d0ed
Size: 15.36 KB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 0ff786c3b22c708b3c212e75eca8d0ed
Sha1 7b9d115fd977863e21a25a7b2bf7f648719710ed
Sha256 04d3dd2a61acaca1f0df968284a93510dbe68e1b23d2a03331a5da6c5a4b9d6b
Sha384 53acf6f9c296cffd5b4c5ce3c51e210f64e6025c57b9c7c51b9b03e52d357fc19ba4208a37eb29323e96c080f9419824
Sha512 ea25b9ca34b131ffaff7481138ea046c4e006bbd21b61394cc899d13f4eff3c883fae8f3492746538ef01188a8e225ea6ed4e45f10c3a8666033ccd7ba6cb90e
SSDeep 192:fqHOoLPoHeVQBNBY0fidcj3wJLsN3AAK8BzvTt1NpkAm1paLsehDPP0B46UVABgn:fKOe2/7c9sN3zfZR1m+RG2A6C
TLSH 9262D79AD9D21F6CDE4F80703A11F838BE74B69046659AE7D7828C315DA38D44128FFD
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.reloc
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path pe:dll
Shape pe:dll
1 nodes
Name Value
Info
PE Detect: PeReader OK (file layout)
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.reloc
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙