Suspicious
Suspect

3078d19a4860184eaac43cb45622672f

PE Executable
MD5: 3078d19a4860184eaac43cb45622672f
Size: 218.11 KB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 3078d19a4860184eaac43cb45622672f
Sha1 fbfaff2e2ed7ac6608c1a7bb2055941d54c52a92
Sha256 c03f09eda8c19fa5c26854a81b01069454faf66e78844f61d301bebda4a09b86
Sha384 573d5afe9a56f849f5298c6f26f45fef1c7b9bcb5a108868d062c1aca13fbd1a73ac4f854995f3fcaa026c4792a20401
Sha512 076316a83f697460bb3a7919ee24b540b3a6b65f5fbbf5b22cf6fe5a57d2a16c5654c69e0a176b9708c01a58ab5dbf6e824feb83b494a059db9058a0d136ad70
SSDeep 3072:wODK3Ly/3auq+Ja1ZjE+r+DVA3IGwjJiZBdNiRSPA/iDoY4js6b32:sby/qv2a1ZjE+r+Dm3cjEbLMyoh7
TLSH DE249E18B6A61C7ADD7B8535C8430D02E7727C9107A0E66F07A08EE6DF5F7A09B2E711
PeID
Microsoft Visual C++ v6.0 DLLMicrosoft v12.00 64bit C++ DLL - sign ASL ( 64 bit )
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.reloc
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path pe:dll
Shape pe:dll
1 nodes
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
PDB Path: t$di
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.reloc
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙