Suspicious
Suspect

aa9687303fbfca2bb08375b06d01fe48

PE Executable
MD5: aa9687303fbfca2bb08375b06d01fe48
Size: 1.31 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 aa9687303fbfca2bb08375b06d01fe48
Sha1 cae2d51151f7020be71f9cfca53964be86c45030
Sha256 b83b95f0e9dadbd328e5488a244e12f3ca93eb1edbf6af6eae50c11df356a46d
Sha384 ff24b6c1affc02c6447f29a4d278fa8b2c0ce428aff2b5e7e7edc6e1525587f84390ca231b5cf236967a5c36f67517f2
Sha512 bce782a49f9afaf0f96f57b3283e2311d3c48b24cc34a526f4fe8758276e5c0ca410428a0f307de70f392d0428ae170c234a3ace51914d098cd265613ccefb2a
SSDeep 12288:sYkI9i+Rgtm5Y10sLzfmNxfxXBlzajchNBOI:sYbQewi+LzfmNxfBBl+9I
TLSH 6E551688D87ED4C5CD844E3189312197D434390D933A8297BFF57AA277EC79889C89AF
PeID
Microsoft Visual C++ v6.0 DLL
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.data
.rdata
.pdata
.xdata
.bss
.idata
.CRT
.tls
.reloc
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path pe:exe
Shape pe:exe
1 nodes
Name Value
Info
PE Detect: PeReader OK (file layout)
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.data
.rdata
.pdata
.xdata
.bss
.idata
.CRT
.tls
.reloc
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙