Suspicious
Suspect

2cef2bcc314f01d8d41082001f4e8eef

PE Executable
MD5: 2cef2bcc314f01d8d41082001f4e8eef
Size: 3.32 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 2cef2bcc314f01d8d41082001f4e8eef
Sha1 512826138ec328c819e61311b0531832fb11bcd1
Sha256 2639905ed481e042aecb7b82ab285014593674814487f9004bc438918aaa6cab
Sha384 9d90dbe9479ba6db58f972d82a416f143bc155c1346f2bea1f7662afe6075dd68b61550b6348e8bcc762e3beb4604a3c
Sha512 f6201c39dea8262956aed1cf80118cc05c85bbfa9932e550be534076abd256b1fa674dcebf9b989e8346cbcacd2af047f34d314b53bddef20378624b26659fba
SSDeep 98304:wBX4WNI0xeQM3RO2jf9jex1aBiTVFIXekvbHT3JNYpyjTPUDCds2WbmPkz2u/h/O:G4WNI0xeQM3RO2jf9jex14iTVFIXekvd
TLSH 1FE57B0B2D6092A9D49A9F3AC1364111E674B898C73963EB3EC4EA741E347C31EB7F45
PeID
HQR data fileMicrosoft Visual C++ v6.0 DLLtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.xdata
.idata
.reloc
.symtab
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path pe:exe
Shape pe:exe
1 nodes
Name Value
Info
PE Detect: PeReader OK (file layout)
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.xdata
.idata
.reloc
.symtab
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙