Suspicious
Suspect

1b3d053cbe1a1a4ea39653b85275692f

PE Executable
MD5: 1b3d053cbe1a1a4ea39653b85275692f
Size: 3.59 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 1b3d053cbe1a1a4ea39653b85275692f
Sha1 6088355c3d6650e3a866011aad4b8a52e3b6658b
Sha256 05992bfebd646ab918b2e31f4cad23f0e0b7efabd5c1fae2ae40c8b48753f40d
Sha384 b2b9edd0ad85faec84d9fbfe143bf645947c8e966fa0695f3d1179cff5b02c03ae39fa05be635e1dfdd7a7b7993eac76
Sha512 2ea404d1f6b02899546f4c7112983885a67bab1bc9f93630fcada7d2cd484c580ff3009170cc12e4efad5049ee952f6a174513b9ca0f669aba62274231316665
SSDeep 49152:7LJSJiSXkRF8dGKYK3IoBSXdYsteiKofKVXYIq0qwMApr/jbmWMoi69ZcaOUBB3y:7NQiS0RFm4NX9teDGKVZqbw+jxaOUz
TLSH 1FF5332A88B252F7EA88D4F62FD98795AE21804D7D598707767B340857CF1F222FF244
PeID
Microsoft Visual C++ v6.0 DLLUPX -> www.upx.sourceforge.netUPX 2.93 - 3.95 (LZMA) ASL sign UPX 3.02UPX v3.0UPX v3.0 (EXE_LZMA) -> Markus Oberhumer & Laszlo Molnar & John Reiser
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
UPX0
UPX1
UPX2
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path pe:exe
Shape pe:exe
1 nodes
Name Value
Info
PE Detect: PeReader OK (file layout)
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
UPX0
UPX1
UPX2
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙