Suspicious
Suspect

59f0cd409329ccb0f06cc3bf6618488b

PE Executable
MD5: 59f0cd409329ccb0f06cc3bf6618488b
Size: 3.03 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 59f0cd409329ccb0f06cc3bf6618488b
Sha1 be8b6c18bc84a4d33a1df436f22084087bd53f02
Sha256 b8cb171a920f81e1caa15fcb1ab3c4b5110dbc7a4d541f5ad1fb268eda834baf
Sha384 c15d1da8f6cba9fb494afaccfc971bfb6d2d3eede9520f3fda4a517ea8c692e56a380c3c3c58c5bb60b23bc3d48615bb
Sha512 49b22f97f522575a3774888c8c5d8983756beaa74791ed409c321a618eecba4fe475821364786246aeda8740a373ec7c03db4ca71c9a6d560ce5f031d846e187
SSDeep 49152:ZeusnIUaZBh7p3DCwHPQR3ZhVa36bZpHT3eNRGMrxI+jHBPbQWmjGp0s4hPYi9Ao:ZeusId3DCwHYzUMhjejGWXjHZkWmK03a
TLSH 6BE523A479CA7E71F036C3B746A3B4FE722D3B5681B08C4E2AC86B156D1291C2C77749
PeID
Microsoft Visual C++ v6.0 DLLUPolyX 0.3 -> delikon
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.Rcy
.r>,
.N=O
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path pe:exe
Shape pe:exe
1 nodes
Name Value
Info
PE Detect: PeReader OK (file layout)
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.Rcy
.r>,
.N=O
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙