Suspicious
Suspect

6d76cf419ef27091ef9a90c65e78a025

PE Executable
MD5: 6d76cf419ef27091ef9a90c65e78a025
Size: 2.42 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 6d76cf419ef27091ef9a90c65e78a025
Sha1 40b128eff9d0e01bef0d4af86a9ed2c32ba8063c
Sha256 6049aeeff1b21076191fcc6c47502f3f71e29dec65f788e01d1062245e589b56
Sha384 8ee4c9d0340e3957775638daafd3705b03055154fe540d16113309c012259630abc18d93a6a3ef979a63c3878b8c7b87
Sha512 b794f98735b4892629e0e01339582952a084e7f019a77de81965d7d551324cf9c5596c986abb7d7327472dc16a6d6ada64d568314fd0d171ab6fcc9e4a442983
SSDeep 49152:cZiB34IOPHO0XKDNEtR2Z3Au/PJvTs6a:k0StRa/54
TLSH 1CB59E4AA3B801FDE0BBC274C9565A07D7B2B8061674D79F13D4479A2F23B716E2E321
PeID
MASM/TASM - sig4 (h)Microsoft Visual C++ 8.0Microsoft Visual C++ 8.0 (DLL)Microsoft Visual C++ v6.0 DLLPe123 v2006.4.4-4.12UPolyX 0.3 -> delikon
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
_RDATA
.reloc
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path pe:exe
Shape pe:exe
1 nodes
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
PDB Path: t
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
_RDATA
.reloc
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙