Suspicious
Suspect

256a2c7e8913d763a6510f561dbed7a1

Share on LinkedIn
Print
PE Executable
MD5: 256a2c7e8913d763a6510f561dbed7a1
Size: 2.99 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 256a2c7e8913d763a6510f561dbed7a1
Sha1 c52a152e2a5b150936c6ac7d723f2883f043c5b2
Sha256 8e57f52d19952b761b82a28b528705df1e3d607b4d317bc3d96f1a27f8242d72
Sha384 b121558f8d589117992446ec2e18d50979b91542f4ba98555db5bf3b13a1f8844b0785bcb8a04c1ac1046c93a693bb5d
Sha512 29dbed39eebc256387479aeeb4370f174ee2f8592156477db0c946b3b67c723b2964559afe650c3324f8f39cde6ffd1424384355b54198f95c7065c67b2e0e44
SSDeep 49152:TFWXPM677rPksxo+2Dw7POzuhSlu8s8gk7ZJeSA6Qr2/FE9aIHuBDw9dfLZY:TOPX77nxo+TPOzuauz8gk7ZJM2/FEOmo
TLSH 57D5239A7CF358B4D07AC3318FD3E8AD71693B8587614E9B36CC5D409D228889C7A778
PeID
Microsoft Visual C++ v6.0 DLLUPolyX 0.3 -> delikon
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.CRT
.FoR
.%Gv
.E-X
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path pe:exe
Shape pe:exe
1 nodes
Name Value
Info
PE Detect: PeReader OK (file layout)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙