Suspicious
Suspect

15ff48236acd80370f131c4de94d89dd

Share on LinkedIn
Print
PE Executable
MD5: 15ff48236acd80370f131c4de94d89dd
Size: 5.45 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 15ff48236acd80370f131c4de94d89dd
Sha1 ef069f096a7d4aad71c1a1bca1c716cd79212f6d
Sha256 b8644e7bdf468dc7d5f10960cfe4ce4b0dbdf1d0a7ee2cc91bed20b41487aedc
Sha384 d3ee5385e4bc718c33b3b6f5ca6bd59ded8e649aa2591fe1ff4f3258833ae6663bbd7837fe0d5a3e23467b729bcaf815
Sha512 592dfb94b7e301a5c5cc2528122f5fe8dd9cf56133818661a3ac4ba67299f415f7a2caa93546fd2b42713a493668d6b1496edcd0047decf7bf235f9bcfbd3c8b
SSDeep 49152:SUSTBHkUNTR0v5VAzP9ZALtNW9oqcyli7TJVBLk5LEarMj5:SUS9iPHgM
TLSH BB46C64BEBB650D1D4BEC0399652A62AFC713899C338A7DF97815B461B21BE0ED3D340
PeID
Microsoft Visual C++ 8.0Microsoft Visual C++ 8.0Microsoft Visual C++ v6.0 DLLPe123 v2006.4.4-4.12Private EXE Protector V2.30-V2.3X -> SetiSoft Team
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.idata
.tls
.00cfg
.fptable
.rsrc
.reloc
Resources
RT_MANIFEST
ID:0001
ID:1033
STICH beta

No STICH Path has been generated for this analysis yet.

1 structural branch were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 1
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
PDB Path: C:\Users\jscha\CLionProjects\untitled\cmake-build-debug-visual-studio\Debug\agent.pdb
An error has occurred. This application may no longer respond until reloaded. Reload 🗙