Suspect
PE Executable
MD5: 9062fd38a3c4505e53941ca086bc777c
Size: 7.99 MB
application/x-dosexec
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
| MD5 | 9062fd38a3c4505e53941ca086bc777c |
| Sha1 | da1704cfbae51d5ae66f214596e1462fc8878d87 |
| Sha256 | ab782f75957f3a4e4a398f170f5d41c592d2f8ca135bda12875b994944e78ab2 |
| Sha384 | 0b2e451ecc2f2acfedbd5cc145be0e4bce9313c57d6b0dc3aa2889cd6bbd065f7a8f73ee5fc7811cd877f4b5e2639db4 |
| Sha512 | 16b9536dd2aaa7767251cac9abccc90ae779a78d2d1934a8c9e441aa6b60b9b52b21cf5f851c6ff2f9896658f1fd03262aebc8cdabde7cf7455335d1f1819686 |
| SSDeep | 49152:pVZPDexk6G0LmFQvY8aIdRNGPBuDqKrKB6LIooGTlGeU+P3h1MujN4HkbuYAgt9i:LlDewavYJwM749vE595zAoH5u |
| TLSH | 58865B11BA5A58ECC05AC47482464A63AA3134DB0B35BAFF45C486783FAAFF55F3C718 |
PeID
MASM/TASM - sig4 (h)Microsoft Visual C++ 8.0Microsoft Visual C++ 8.0 (DLL)Microsoft Visual C++ v6.0 DLLPe123 v2006.4.4-4.12UPolyX 0.3 -> delikon
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:exe
Shape
pe:exe
1 nodes
| Name | Value |
|---|---|
| Info | PE Detect: PeReader OK (file layout) |
| Info | PDB Path: agent.pdb |