Suspicious
Suspect

907054c4c31fda94ea23d4ad79afea07

JavaScript
MD5: 907054c4c31fda94ea23d4ad79afea07
Size: 17.57 MB
application/javascript

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 907054c4c31fda94ea23d4ad79afea07
Sha1 bf0c94488502e5066ec5f986bf5e247a903fe701
Sha256 22c1e13b167a91fb33858c78ea228f7f89d9b5b14568243ec8d75db1b4b9b57d
Sha384 b3f51771f793e14f98ba7b091ff787773389cc1b58dcd7ee12ac59a6de6c599b198e6547cd25a6671ee4a910810314e3
Sha512 58143d35a841e734e2403eb1f0e0db43686c62a1b9cb579da04fd957444af983af75e4d4d1dd6e05a7f54278ac4628a1d5e63d57f65ddeab4a82e81a5a1b33cc
SSDeep 393216:Q0L1F2exgIfUKOc0XEAphVtnIwQSg+nFoIykz5QxvF7X2:ppsex58KP0RphDBo+FoIyg5yvF7
TLSH 6C0733A877454D64F8FF423CA9D08A22A2F0B5642B95D7BB0BF10D221D272D4DF787A1
PeID
Microsoft Visual C++ 8.0Microsoft Visual C++ 8.0 (DLL)Microsoft Visual C++ v6.0 DLL
Overlay_dfd05c1c.bin
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.fptable
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:0
ID:0002
ID:0
ID:0003
ID:0
ID:0004
ID:0
ID:0-preview.png
ID:0005
ID:0
ID:0006
ID:0
ID:0007
ID:0
RT_GROUP_CURSOR4
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
3 / 3
Path pe:exe~T1059.007>pe:rsrc>bin
Shape pe:exe>pe:rsrc>bin
technique3 nodes
Path pe:exe~T1059.007>pe:rsrc>img
Shape pe:exe>pe:rsrc>img
technique3 nodes
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
Overlay extracted: Overlay_dfd05c1c.bin (17220554 bytes)
Info
PDB Path: t$mn
Overlay_dfd05c1c.bin
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.fptable
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:0
ID:0002
ID:0
ID:0003
ID:0
ID:0004
ID:0
ID:0-preview.png
ID:0005
ID:0
ID:0006
ID:0
ID:0007
ID:0
RT_GROUP_CURSOR4
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙