Suspicious
Suspect

28987a8afff75ef1a5831ab3911b76ba

Share on LinkedIn
Print
PE Executable
MD5: 28987a8afff75ef1a5831ab3911b76ba
Size: 5.22 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 28987a8afff75ef1a5831ab3911b76ba
Sha1 4f6448cff4133a8611f82ae64c063e1789cd50cf
Sha256 4b67a337ba1a61a00d4145cad082fadc3a6daee3949f3dbe081680d3a6febe20
Sha384 74e11291fc04e1fe6a50194b856476d1176c76bd8973050fd256888d8389c353650bf5c26579067dfff6018aedfe7403
Sha512 e9877f6c5758088fd053a8730e8852c085e013f6b3690906224b982702fe9c23b274332bae77467bce8cdbb30411269d763266e6835c3ede6a5ca895c9ec7dfa
SSDeep 98304:rly2da1/V0yQIcPJLLt0MwsE4Mrc9iSGGY9aHNFoAQGdn/1kf5T01:1UV0fjPJHt0bsEO9FGGYsHOGLkf5T
TLSH 1C3633C66EC7A5F8C00AC3BC8612F49EB139BB814AB57D0939DC2C485DA6B45643F7E1
PeID
Microsoft Visual C++ v6.0 DLLUPolyX 0.3 -> delikon
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.217
.~PM
.n]c
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path pe:exe
Shape pe:exe
1 nodes
Name Value
Info
PE Detect: PeReader OK (file layout)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙