Suspicious
Suspect

5dfc04091a89e5105c03cf7f9ef24811

Share on LinkedIn
Print
JavaScript
MD5: 5dfc04091a89e5105c03cf7f9ef24811
Size: 13.59 MB
application/javascript

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 5dfc04091a89e5105c03cf7f9ef24811
Sha1 a05f17ff44007ac323fd2f5c8b25d5e9588e6d95
Sha256 2731ec852d3fb2d6da239978f376ffc94c86ac484b4521dfaef944388fd3fcae
Sha384 af1c206e2caaa8fd0abaaf51d8d7af8eb1219a46bd31100c4964f7c8b5cfe01b62f57dde0b86cf5216f311bd4eb2ebb4
Sha512 ff0016e3a9c591d5c4614b25f163a55e79454be2136bb30a3ac680c381ffb50b783be7dc222b2fae1a9ff04d29ee6558a238412e7acb193c905a9772038363cf
SSDeep 393216:01oW0lLW8lL+8dQusl3VrAZYCuPJO4E3+d94eg/o9:01oWAW8lK8dQuOCJuxmOd94z/+
TLSH B3D63348774D0CDDE95F8735A8E6571763C2B9B353A0C2DF1BA009460A9B1E8FEB5B20
PeID
Microsoft Visual C++ 8.0Microsoft Visual C++ 8.0 (DLL)Microsoft Visual C++ v6.0 DLL
Overlay_173f0ea7.bin
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.fptable
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:0
ID:0002
ID:0
ID:0003
ID:0
ID:0004
ID:0
ID:0-preview.png
ID:0005
ID:0
ID:0006
ID:0
ID:0007
ID:0
RT_GROUP_CURSOR4
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
3 / 3
Path pe:exe~T1059.007>pe:rsrc>bin
Shape pe:exe>pe:rsrc>bin
technique3 nodes
Path pe:exe~T1059.007>pe:rsrc>img
Shape pe:exe>pe:rsrc>img
technique3 nodes
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
Overlay extracted: Overlay_173f0ea7.bin (13261028 bytes)
Info
PDB Path: t$mn
An error has occurred. This application may no longer respond until reloaded. Reload 🗙