Malicious
PE Executable
MD5: 6c8c407442300de8d7750509fd221426
Size: 3.59 MB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
File
Type
Portable Executable file
Size
3.59 MB · 3,593,216 B
Hashes
MD5
6c8c407442300de8d7750509fd221426
Sha1
bdf49d248d782891ea4f90c3f8c492f1faa9e435
Sha256
accfca5192b6395b28db6266a51e4ebd08284b2344f451a8d0f10d058b56a1c3
Sha384
7252ad2cb15b55c36dee62b02dcfe8e38a16effbe6129895decbc54aad426fee430c3491d502ca704b0755a3deada0b4
Sha512
df8dcc0966d462603ab8f3fec897c5a7e937827d9369197ba6eb1b0789c07e695dae497d0d497d04f711ec122abec690972eb8091e1793061aaf3f0231c9e271
SSDeep
98304:/2ATNhJ9KafWT1aaeqdJx/bqTCM6t+0bJ:uWJ9tfWBayHxeP/
TLSH
14F5339458E1AFD3D7791BB11F4690A30E8D8CAE29F8DE1AFD3CC15590506F3FA9A090
Detection
PeID
Microsoft Visual C++ v6.0 DLLUPX -> www.upx.sourceforge.netUPX 2.93 - 3.95 (LZMA) ASL sign UPX 3.02UPX v3.0UPX v3.0 (EXE_LZMA) -> Markus Oberhumer & Laszlo Molnar & John Reiser
2 malicious · 2 files
EXE6c8c407442300de8d7750509fd221426T1027 · T1055Go Loader (Factory-v3)
Structure
EXE[UPX unpacked Lzma].exeT1027 · T1055Go Loader (Factory-v3)
Structure
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:exe~T1027~T1055
Shape
pe:exe
malicious
1 nodes
| Name | Value |
|---|---|
| Info | PE Detect: PeReader OK (file layout) |
| UPX | UPX method: Lzma, filter: X86CallJumpBe |
| UPX | UPX unpacking confidence: 0.99 |
| UPX | |