Suspicious
Suspect

1b8128ca311379eff8a70c9e3cf8e766

PE Executable
MD5: 1b8128ca311379eff8a70c9e3cf8e766
Size: 333.82 KB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 1b8128ca311379eff8a70c9e3cf8e766
Sha1 c8eaa68324cf39d681af0fb60e0dc92d310c2f80
Sha256 958cf7e879ff5a52e365859b81d2ac1f4b198e05e873b438f147dd5975ed77e1
Sha384 1fc585a70c501e02a9f0ca1f606c44b4dd098e6016003e31806424bac7f178c8d65d0f680a6343b929246bcc256fe655
Sha512 d1f54585e71a464d178b10faabac683bdf0066895f779d3bef3bdfa0ba61d7a5d3a0c54e4108772d12a85752cc6bc3fb44405f2bcc98ef8d0db8ad69f21a8257
SSDeep 6144:J9ycm+gGZsU4d0gLqiX9wh3h9Sna/MZdwZUUuoDgBz:JXzZsU4d0gLqiBld2URoWz
TLSH CF647D01B481D136E6AE0930B875DBBB497DB8701BE2E5CFA3D40DEE4D216C1A73875A
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.fptable
.reloc
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path pe:dll
Shape pe:dll
1 nodes
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
PDB Path: t$di
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.fptable
.reloc
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙