Suspicious
Suspect

48b2c96b2b5c92e1d7792a60af223b53

PE Executable
MD5: 48b2c96b2b5c92e1d7792a60af223b53
Size: 2.68 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 48b2c96b2b5c92e1d7792a60af223b53
Sha1 21b797c7852b64c2da9554290ef4c3a0f406d7d2
Sha256 f5b850be90148056aa4dcc36802479a73a2966a07e7e66562feeee013ed70de5
Sha384 7a3e9077ae30c1bea61982d0a22ae8e00b7a24f81a417e528a6c6e373b4d7f8adfe8d98069c18f479f31209cc79472ff
Sha512 4736a55dee0e01aa1a0e6979407fa9099075fb98aacc2abf40aa2edd31f0be53f99b5dc3d077ac5b4ba43c4901c59362d8e4863390e3a21f6e1598aca9fbbbae
SSDeep 49152:3qrhItLA47PFxS1JAdcq6ORxranSgvcU8HnuD1Ac:aU7jIAdcq6gx5jW
TLSH DAC57B43BC8161B0D999E336D4750251F730B8481B3573D72E46BBB82E32BE51E7AB98
PeID
Microsoft Visual C++ v6.0 DLLPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!
[Authenticode]_f265f7ab.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.idata
.reloc
.symtab
STICH beta

No STICH Path has been generated for this analysis yet.

1 structural branch were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 1
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
Authenticode present at 0x28C000 size 8120 bytes
[Authenticode]_f265f7ab.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.idata
.reloc
.symtab
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙