Suspicious
Suspect

6d76cf419ef27091ef9a90c65e78a025

Share on LinkedIn
Print
PE Executable
MD5: 6d76cf419ef27091ef9a90c65e78a025
Size: 2.42 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 6d76cf419ef27091ef9a90c65e78a025
Sha1 40b128eff9d0e01bef0d4af86a9ed2c32ba8063c
Sha256 6049aeeff1b21076191fcc6c47502f3f71e29dec65f788e01d1062245e589b56
Sha384 8ee4c9d0340e3957775638daafd3705b03055154fe540d16113309c012259630abc18d93a6a3ef979a63c3878b8c7b87
Sha512 b794f98735b4892629e0e01339582952a084e7f019a77de81965d7d551324cf9c5596c986abb7d7327472dc16a6d6ada64d568314fd0d171ab6fcc9e4a442983
SSDeep 49152:cZiB34IOPHO0XKDNEtR2Z3Au/PJvTs6a:k0StRa/54
TLSH 1CB59E4AA3B801FDE0BBC274C9565A07D7B2B8061674D79F13D4479A2F23B716E2E321
PeID
MASM/TASM - sig4 (h)Microsoft Visual C++ 8.0Microsoft Visual C++ 8.0 (DLL)Microsoft Visual C++ v6.0 DLLPe123 v2006.4.4-4.12UPolyX 0.3 -> delikon
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
_RDATA
.reloc
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path pe:exe
Shape pe:exe
1 nodes
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
PDB Path: t
An error has occurred. This application may no longer respond until reloaded. Reload 🗙