Suspect
PE Executable
MD5: 5bae64f3a91c6f66a08cc0f07369b8c9
Size: 5.3 MB
application/x-dosexec
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
| MD5 | 5bae64f3a91c6f66a08cc0f07369b8c9 |
| Sha1 | 9d61fe90ed182fb1ab50488d8a6c3a4c0d8635e2 |
| Sha256 | 6630ff11e8ed3fc9c0276fa5c0de0a3eeaec6e7c8e0158adb6bece4db4d4e408 |
| Sha384 | a4861f7cedb222dc6132ab4d18f9d40b58132d405cb74c6fa689c381e22aa58ef87b5c9aeed40447c55ee25d14399b4b |
| Sha512 | 56757692fa3b8d53fc15176c9284d5d799d9038c410e8efc0b48b6ad243d150be7c0d9eb955ad69d564e53a355d6c2f3a67cffa7d522d158446fcc3e214580c2 |
| SSDeep | 24576:jbLgBbLgurgDdmMSirYbcMNgef0QeQjG/D8kIqRYoAdNLKz6626M+vbOSSqTPVXy:jnsnsEMSPbcBVQej/1INRx+TSqTdX1H |
| TLSH | 2136013D69D4E1A5D0483332C0B38B60B7793CCD615B139A175CFCA79CDBA4E9A06B26 |
PeID
Microsoft Visual C++ v6.0 DLLMicrosoft v12.00 64bit C++ DLL - sign ASL ( 64 bit ) Pe123 v2006.4.4-4.12UPolyX 0.3 -> delikon
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:dll
Shape
pe:dll
1 nodes
| Name | Value |
|---|---|
| Info | PE Detect: PeReader FAIL, AsmResolver Mapped OK |
PE Layout
UNKNWOWNsuspect
Memoryhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential