Suspicious
Suspect

9b92e32fb60c4927a84b656350a48e64

PE Executable
MD5: 9b92e32fb60c4927a84b656350a48e64
Size: 2.99 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 9b92e32fb60c4927a84b656350a48e64
Sha1 d8a9228ab0a91d05e85d630f967524120213941f
Sha256 5e93ff67d7a22fa954147eff57605a461326245226e89943672907ea697ccfba
Sha384 031faa7f98f2f68a23484c1d10aa2e51f424781101157a3786c0eb4d884e2ac701a578f0eece38f6a2bf3fbceecdb786
Sha512 62452f185715e3a5b85c0fe49f5a6ece1e39233d53d7d2a9d99dab333d2840e11c8841928d656e61737ed69e5cbfb41ef2426d2709ed2671024bfac6d725b9c2
SSDeep 49152:djIicgFERmiCn5OePb+AW1E5XcMAZLnOdoeostb7+wx3ffC1TK5rLvsn75KkbkP:6ib2giS631E5XKLnOMPwxvfBtc5K/
TLSH 38D52396FCE65670E47BC7F702C362BDB169BB8582B18D0736C817205D029296C7B778
PeID
Microsoft Visual C++ v6.0 DLLUPolyX 0.3 -> delikon
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.~SA
.!{L
.$R%
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path pe:exe
Shape pe:exe
1 nodes
Name Value
Info
PE Detect: PeReader OK (file layout)
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.~SA
.!{L
.$R%
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙