Suspicious
Suspect

6e931ad7417975ab1bd408f9e545c847

JavaScript
MD5: 6e931ad7417975ab1bd408f9e545c847
Size: 10.32 MB
application/javascript

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 6e931ad7417975ab1bd408f9e545c847
Sha1 c65a9cf3f908ec38113d155e278fa327c4cd5ae1
Sha256 83bd7e2f344daaf2305b62e11b9c8c1bd76186a444a13182bb9c7d892e8ca10c
Sha384 74c8aa9c00acf16ea36bb4ac941011e52519b0b3dc380082f907635852a65a6bbd99b1f00b4671ea54d78b77eee045d2
Sha512 e3ec08c47d2acbb534cacf98888622828abf6542fbe2eb15fb8fdcd0d37cf2a884a22c5a5e85404cfbe71ab7509da48bc96a14c2918aa2093c5245143235cf55
SSDeep 196608:Doj9qw7GcRYEBCtTWT+ZLk0sOto/DDQn0tJfqzlEhlT6uihijAoNzl18MREWxC9m:Uj9qARYd6U40sO2/nO0tJYuRQAliMRE6
TLSH B4A633AFF0821DF4D331AC7A2E9BAE76A37A3857572905B6FAB0211DF6417CB3064051
Overlay_7313ad50.bin
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
CODE
DATA
BSS
.idata
.tls
.rdata
.reloc
.rsrc
Resources
RT_ICON
ID:0001
ID:1043
ID:0002
ID:1043
ID:0003
ID:1043
ID:0004
ID:1043
RT_STRING
ID:0FF9
ID:0
ID:0FFA
ID:0
ID:0FFB
ID:0
ID:0FFD
ID:0
ID:0FFE
ID:0
ID:0FFF
ID:0
RT_GROUP_CURSOR4
ID:0000
ID:1043
RT_MANIFEST
ID:0001
ID:1033
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path pe:exe~T1059.007>pe:rsrc>bin
Shape pe:exe>pe:rsrc>bin
technique3 nodes
Path pe:exe~T1059.007>scr:js~T1059.007
Shape pe:exe>scr:js
technique2 nodes
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
Overlay extracted: Overlay_7313ad50.bin (10255720 bytes)
Overlay_7313ad50.bin
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
CODE
DATA
BSS
.idata
.tls
.rdata
.reloc
.rsrc
Resources
RT_ICON
ID:0001
ID:1043
ID:0002
ID:1043
ID:0003
ID:1043
ID:0004
ID:1043
RT_STRING
ID:0FF9
ID:0
ID:0FFA
ID:0
ID:0FFB
ID:0
ID:0FFD
ID:0
ID:0FFE
ID:0
ID:0FFF
ID:0
RT_GROUP_CURSOR4
ID:0000
ID:1043
RT_MANIFEST
ID:0001
ID:1033
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙