Suspicious
Suspect

56542d2d190e7025f9eb9e5086c08b3b

PE Executable
MD5: 56542d2d190e7025f9eb9e5086c08b3b
Size: 2.21 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 56542d2d190e7025f9eb9e5086c08b3b
Sha1 2f769d3d79a5fcfcfa2ec7fdf7279102f271e741
Sha256 0ae4447d755593ee1931170d4187a07a29bf0690179acc39b7400a4c65cd07c5
Sha384 e6291e511259099d7487c0ecc99b79736919aae6608ee2d5d2d115a10b4e3e60a3fe233b3603271d8d3d8aa3fe6c0881
Sha512 3612ad9621dbc29707d8509df50d6e671a592590b42f9b388a26004c314203d34209a59192314a26158057a1b86a0eb217de9fb0887a346fc6653fc46fe8d79c
SSDeep 49152:/z7mV4kwsjcks87ZSqKOO6H94dD1rWJjnQEqMQp0:773p0
TLSH A9A51947E339D1D8C16ACCB542866235F734BC8D8124BA7F9BE0A6312E21B51961DBCF
PeID
Microsoft Visual C++ 8.0 (DLL)Microsoft Visual C++ v6.0 DLL
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.data
.rdata
.pdata
.xdata
.bss
.idata
.CRT
.tls
.reloc
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path pe:exe
Shape pe:exe
1 nodes
Name Value
Info
PE Detect: PeReader OK (file layout)
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.data
.rdata
.pdata
.xdata
.bss
.idata
.CRT
.tls
.reloc
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙