Malicious
PE Executable
MD5: 9f019f94eae50e30a5e344f7e54e94bd
Size: 3.59 MB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Portable Executable file
Size
3.59 MB · 3,593,216 B
First seen
2026-10-25 07:45 · 15 hours ago
Last seen
2026-10-25 07:45 · 15 hours ago
Last analysis
2026-10-25 07:45 · 15 hours ago
Hashes
MD5
9f019f94eae50e30a5e344f7e54e94bd
Sha1
c5e500645f726d7cbde6382db7056782e335b3ad
Sha256
f0ad598825e2d1dc29c3dc5f26cae1115882e4cd26f239e0defa4b7b1aec7a13
Sha384
ec8174e8ee69c9823a17bfac979b430af89d9ff8fdd383be7f91ea23f06b5058cac19b973bc50a925d84d7c217bfa15e
Sha512
d4ae39d8dfefd4d82cc059a5fbe3dfcae12a06d0073bf17bfda5fd3902a0b4f1027d1e7b09d130e12791de84188f3ad53a6184bb129ac1e2fda91e6896cf3e4f
SSDeep
98304:dNdalcKVjmoHyxhqmjTqpdBCLcqHhK1UJeQSz7:dNR+SnqYYWcehKaeQ
TLSH
4FF5330FB69B01E3D94ABFBFEED4C6525954876EFD07A93569118E1E800B18DF290233
Detection
PeID
AsCrypt v0.1 -> SToRMMicrosoft Visual C++ v6.0 DLLUPX -> www.upx.sourceforge.netUPX 2.93 - 3.95 (LZMA) ASL sign UPX 3.02UPX v3.0UPX v3.0 (EXE_LZMA) -> Markus Oberhumer & Laszlo Molnar & John Reiser
2 malicious · 2 files
EXE9f019f94eae50e30a5e344f7e54e94bdT1027 · T1055Go Loader (Factory-v3)
Structure
EXE[UPX unpacked Lzma].exeT1027 · T1055Go Loader (Factory-v3)
Structure
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:exe~T1027~T1055
Shape
pe:exe
malicious
1 nodes
| Name | Value |
|---|---|
| UPX | UPX method: Lzma, filter: X86CallJumpBe |
| UPX | |