Deep Malware Analysis of 6527c466fe33563ad7f0cacb1c16209f | md5: 6527c466fe33563ad7f0cacb1c16209f | NSIS Installer | Executable | PE (Portable Executable) | PE File Layout | Win 32 Exe | x86

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	6527c466fe33563ad7f0cacb1c16209f
Sha1	6781676ba03d92c35a7605cf8e6f1063ea448b2e
Sha256	5d655af0cacc81c86d4f2e55adcbde7e13a8619fcbd4ae70ccdde0b5060f11cf
Sha384	a5d1b38571bcfa9870103ec380a79b9908939478e92058e5461ee600b3b3eb4ed1993d11e797a10c3d014cfe207754b8
Sha512	54f89e76cb5f9e5676a0fa9ab835e104663a4f601c8754d0a5d524720c9a272be3db20fd237edc6f4718fbf076b264d9c398f94b3731ec157dd45a2934ac8ec2
SSDeep	196608:jaZk+w/P+CHD4a+KFwUUUx9Y2NPFOsti7A95rIUsFp29XaIT030Hy0SarlZr8s2z:DnumzZFw5S9pE7Asjp29qIT0jarlZr87
TLSH	5CB63347D9778DF0CA330A3890D2196B3305980E485BF4C9F609277ADAF35AADD2879D

PeID

Microsoft Visual C++ v6.0 DLLUPolyX 0.3 -> delikon

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 4 STICH kept: 1secondary ignored: 3

bin 2img 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:exe>pe:dll

Shape pe:exe>pe:dll

2 nodes

Name	Value
Info	PE Detect: PeReader OK (file layout)
Info	Authenticode present at 0xA88B78 size 10352 bytes