Suspicious
Suspect

298bcf114636705657c2292b81b92935

PE Executable
MD5: 298bcf114636705657c2292b81b92935
Size: 974.85 KB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 298bcf114636705657c2292b81b92935
Sha1 742ecbb6ad7624f52bd98a1290460fd4d41f413e
Sha256 846aebdb5e048bcc40916435379810fdd5c5d388f4c86cbd293370a485484321
Sha384 1b8983c28c188183e3a3691c7a3a7be0c9940f574402dc2ac342946ca457075da08ed8228db87cd2ebc498fcb756d616
Sha512 ef2bdb0fbf3f2a6005d036af1c2453898c82ae870998bf47ed8a2ac1f920eee7510ea935d121d156e66a18c960b0f335e48b7de478310055f52b7c966b2108f0
SSDeep 12288:j501K3aqycVFtNB06eA7IJK60lw3I43ybx1zmKi4t+iilMLJPY3dUl0rwW:73FztN1eAwBux1K+oMLK3oW
TLSH 8D256D5B32B191E8D436C03A624FD6524E30B4890775A8EF16A21B603E9DEF74F7E325
PeID
Microsoft Visual C++ v6.0 DLL
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.buildid
.data
.pdata
.tls
.reloc
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path pe:exe
Shape pe:exe
1 nodes
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
PDB Path: bot.pdb
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.buildid
.data
.pdata
.tls
.reloc
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙