Suspicious
Suspect

6e931ad7417975ab1bd408f9e545c847

Share on LinkedIn
Print
JavaScript
MD5: 6e931ad7417975ab1bd408f9e545c847
Size: 10.32 MB
application/javascript

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 6e931ad7417975ab1bd408f9e545c847
Sha1 c65a9cf3f908ec38113d155e278fa327c4cd5ae1
Sha256 83bd7e2f344daaf2305b62e11b9c8c1bd76186a444a13182bb9c7d892e8ca10c
Sha384 74c8aa9c00acf16ea36bb4ac941011e52519b0b3dc380082f907635852a65a6bbd99b1f00b4671ea54d78b77eee045d2
Sha512 e3ec08c47d2acbb534cacf98888622828abf6542fbe2eb15fb8fdcd0d37cf2a884a22c5a5e85404cfbe71ab7509da48bc96a14c2918aa2093c5245143235cf55
SSDeep 196608:Doj9qw7GcRYEBCtTWT+ZLk0sOto/DDQn0tJfqzlEhlT6uihijAoNzl18MREWxC9m:Uj9qARYd6U40sO2/nO0tJYuRQAliMRE6
TLSH B4A633AFF0821DF4D331AC7A2E9BAE76A37A3857572905B6FAB0211DF6417CB3064051
Overlay_7313ad50.bin
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
CODE
DATA
BSS
.idata
.tls
.rdata
.reloc
.rsrc
Resources
RT_ICON
ID:0001
ID:1043
ID:0002
ID:1043
ID:0003
ID:1043
ID:0004
ID:1043
RT_STRING
ID:0FF9
ID:0
ID:0FFA
ID:0
ID:0FFB
ID:0
ID:0FFD
ID:0
ID:0FFE
ID:0
ID:0FFF
ID:0
RT_GROUP_CURSOR4
ID:0000
ID:1043
RT_MANIFEST
ID:0001
ID:1033
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path pe:exe~T1059.007>pe:rsrc>bin
Shape pe:exe>pe:rsrc>bin
technique3 nodes
Path pe:exe~T1059.007>scr:js~T1059.007
Shape pe:exe>scr:js
technique2 nodes
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
Overlay extracted: Overlay_7313ad50.bin (10255720 bytes)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙