Suspicious
Suspect

2c5a4089bafd03e67e7afdad3985523f

PE Executable
MD5: 2c5a4089bafd03e67e7afdad3985523f
Size: 2.91 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 2c5a4089bafd03e67e7afdad3985523f
Sha1 c16f7496e4cf87e816b98f0bb134ac77e577e1c1
Sha256 b193be680eff393e70bd8dba2b8b1d84249b729191aa8a5014ab884360cdc9c3
Sha384 d041a1e154547fadbd9197fc0e353c8e5ed0f704e2527c1469eb88307b11dad1a68a2a32261166b008e33a3826cf21b2
Sha512 54e4f5d1170b2133d7fe02094e77d904d2c6e85df9c3821a6cfd0abf8add4a41f3dafa2efd8b27d94ecffbc1ca32ed3b9d9cf627c569ae38de20478ef8bfaa35
SSDeep 49152:8KtbOOWSuMJSPPDfV3uiW+BQg2iUO9xvBSOjO/YD8IGMpIzYzeFaIh9:1bjAXdVW+CkBLBSEOqQUI
TLSH 92D5239A79FA0930C877C3B29F03F07DB01ABB5A8B618D47F6D865109E136986437772
PeID
Microsoft Visual C++ v6.0 DLLUPolyX 0.3 -> delikon
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.CRT
.UN|
.uU|
.<s?
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path pe:exe
Shape pe:exe
1 nodes
Name Value
Info
PE Detect: PeReader OK (file layout)
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.CRT
.UN|
.uU|
.<s?
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙