6c8c407442300de8d7750509fd221426

PE Executable

MD5: 6c8c407442300de8d7750509fd221426

Size: 3.59 MB

application/x-dosexec

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

File

Type

Portable Executable file

Size

3.59 MB · 3,593,216 B

Hashes

MD5 6c8c407442300de8d7750509fd221426 Sha1 bdf49d248d782891ea4f90c3f8c492f1faa9e435 Sha256 accfca5192b6395b28db6266a51e4ebd08284b2344f451a8d0f10d058b56a1c3 Sha384 7252ad2cb15b55c36dee62b02dcfe8e38a16effbe6129895decbc54aad426fee430c3491d502ca704b0755a3deada0b4 Sha512 df8dcc0966d462603ab8f3fec897c5a7e937827d9369197ba6eb1b0789c07e695dae497d0d497d04f711ec122abec690972eb8091e1793061aaf3f0231c9e271 SSDeep 98304:/2ATNhJ9KafWT1aaeqdJx/bqTCM6t+0bJ:uWJ9tfWBayHxeP/ TLSH 14F5339458E1AFD3D7791BB11F4690A30E8D8CAE29F8DE1AFD3CC15590506F3FA9A090

Detection

PeID

Microsoft Visual C++ v6.0 DLLUPX -> www.upx.sourceforge.netUPX 2.93 - 3.95 (LZMA) ASL sign UPX 3.02UPX v3.0UPX v3.0 (EXE_LZMA) -> Markus Oberhumer & Laszlo Molnar & John Reiser

2 malicious · 2 files

EXE6c8c407442300de8d7750509fd221426Go Loader (Factory-v3)

Structure

EXE[UPX unpacked Lzma].exeGo Loader (Factory-v3)

Structure

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:exe~T1027~T1055

Shape pe:exe

malicious 1 nodes

Name	Value
Info	PE Detect: PeReader OK (file layout)
UPX	UPX method: Lzma, filter: X86CallJumpBe
UPX	UPX unpacking confidence: 0.99
UPX	`UPX anomaly: PE reconstructed from saved NT headers; DOS stub retained; PE checksum cleared; overlay not restored`

2 malicious · 2 files

EXE6c8c407442300de8d7750509fd221426Go Loader (Factory-v3)

Structure

EXE[UPX unpacked Lzma].exeGo Loader (Factory-v3)

Structure

No malware configuration was found at this point.

You must be signed in to view YARA rules.