Suspicious
Suspect

654c028498ccbac116bb0f81f3a65614

PE Executable
MD5: 654c028498ccbac116bb0f81f3a65614
Size: 5.26 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
File
Type
Portable Executable file
Size
5.26 MB · 5,256,192 B
Hashes
MD5 654c028498ccbac116bb0f81f3a65614 Sha1 9e253c4c743d90697c21c2420391e3adec218574 Sha256 444c8577b447fdb15671f8a8eb5b9f9f925f8b91876d87e4596bf5d297f7c293 Sha384 9f84d390c1fa710b48a761a2b3930c98c2ff48f114a37e984500603493235dd2b2568ef2be6e59abd0c734d1a4b2b7c2 Sha512 efefb5b95b32a296010d52d748af149ee7244b114a41fc944e347ee943af2bb4fcda73a24447013df2d458408b43f581e50abb724743d7678033ea10d008f39d SSDeep 98304:nD8h9IHVMpPspaoeHLFxo2GbGnGiSA2magFVBFVFB4DSZjM:nYh9IHVIPoe5xn0GxZZaAVh2 TLSH 5F3633DA6CC7A1B4E886C3344653747DB23F7B914831BC5BB7CE68058E2AE41583EB85
Detection
PeID
Microsoft Visual C++ v6.0 DLLUPolyX 0.3 -> delikon
1 file
EXE654c028498ccbac116bb0f81f3a65614
Structure
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path pe:exe
Shape pe:exe
1 nodes
Name Value
Info
PE Detect: PeReader OK (file layout)
1 file
EXE654c028498ccbac116bb0f81f3a65614
Structure
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙