Suspect
PE Executable
MD5: 654c028498ccbac116bb0f81f3a65614
Size: 5.26 MB
application/x-dosexec
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
File
Type
Portable Executable file
Size
5.26 MB · 5,256,192 B
Hashes
MD5
654c028498ccbac116bb0f81f3a65614
Sha1
9e253c4c743d90697c21c2420391e3adec218574
Sha256
444c8577b447fdb15671f8a8eb5b9f9f925f8b91876d87e4596bf5d297f7c293
Sha384
9f84d390c1fa710b48a761a2b3930c98c2ff48f114a37e984500603493235dd2b2568ef2be6e59abd0c734d1a4b2b7c2
Sha512
efefb5b95b32a296010d52d748af149ee7244b114a41fc944e347ee943af2bb4fcda73a24447013df2d458408b43f581e50abb724743d7678033ea10d008f39d
SSDeep
98304:nD8h9IHVMpPspaoeHLFxo2GbGnGiSA2magFVBFVFB4DSZjM:nYh9IHVIPoe5xn0GxZZaAVh2
TLSH
5F3633DA6CC7A1B4E886C3344653747DB23F7B914831BC5BB7CE68058E2AE41583EB85
Detection
PeID
Microsoft Visual C++ v6.0 DLLUPolyX 0.3 -> delikon
1 file
EXE654c028498ccbac116bb0f81f3a65614
Structure
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:exe
Shape
pe:exe
1 nodes
| Name | Value |
|---|---|
| Info | PE Detect: PeReader OK (file layout) |