Suspicious
Suspect

6a6e7e8d3c49f4a248878a0e0231ef8a

Share on LinkedIn
Print
JavaScript
MD5: 6a6e7e8d3c49f4a248878a0e0231ef8a
Size: 17.6 MB
application/javascript

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 6a6e7e8d3c49f4a248878a0e0231ef8a
Sha1 9e5621b7cf5a3f2448d117c2f524d209d9f67bfe
Sha256 a656f09a6aa6a48ccdba9e48858ca2340ef7a118551973350c43a6f8ceea3ac7
Sha384 33b1dddd5a2f87e43bf8373a98cc556728b12637f9e0337327e00515ac18183b2f9408c5829c3a1b6f0217c68f3453d5
Sha512 5b77a248b393babd5861f1e1d1b19fd9276cbea9e4559c075995c3509188228f1a7a26a8e6a6c69bdf6a45ea03d5b1b9365bfe53a9eba24c9b9695148fb07a51
SSDeep 393216:E0L1F29idDgIfUKOc0XEAphVtnIwQSg+nFoIykzNnxvZ7X2:dps9YD58KP0RphDBo+FoIygNxvZ7
TLSH CF0733A877455DA4F8EB423CA8C0CA22A2F1B5242F95D7EF0BF10D6219272D4DF747A1
PeID
Microsoft Visual C++ 8.0Microsoft Visual C++ 8.0 (DLL)Microsoft Visual C++ v6.0 DLL
Overlay_4179a53a.bin
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.fptable
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:0
ID:0002
ID:0
ID:0003
ID:0
ID:0004
ID:0
ID:0-preview.png
ID:0005
ID:0
ID:0006
ID:0
ID:0007
ID:0
RT_GROUP_CURSOR4
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
3 / 3
Path pe:exe~T1059.007>pe:rsrc>bin
Shape pe:exe>pe:rsrc>bin
technique3 nodes
Path pe:exe~T1059.007>pe:rsrc>img
Shape pe:exe>pe:rsrc>img
technique3 nodes
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
Overlay extracted: Overlay_4179a53a.bin (17249462 bytes)
Info
PDB Path: t$mn
An error has occurred. This application may no longer respond until reloaded. Reload 🗙