Malicious
Malicious

adb0a3db727b4d5ec87ed6d4af4e16fa

PE Executable
MD5: adb0a3db727b4d5ec87ed6d4af4e16fa
Size: 13.13 MB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 adb0a3db727b4d5ec87ed6d4af4e16fa
Sha1 509a41b4922b627666dd371e78df2c969f46e61b
Sha256 6850a9d2b84bf20f741bf21af7476307220544cae9f6c0e67ce344d2784193e8
Sha384 9e7735a219053730fdf6262cc4609486a84e4e5050bb4f85cecfbc888a5485a5d0604bff9c127383c460047de97b7c50
Sha512 02f518c9ca924a1db60a7edd8665bc1981534509032ac74361c5826e3122bb3f2ae7b441456b53445d031ac3b70d604e78793bddf0dd47a84e7949d2022fdc2d
SSDeep 49152:xjInNwPAyQYyjiBz7Se69qt5r1cKn0eIfMCpFEC1rsBHOaak+ltR7MdTmsWmwBN:x+U+V+CNSHXaVT7ogB
TLSH 85D67B07A96546E5C485EE38C57B8352B678BC8D8B3173E36E50BA783F763D099B8340
PeID
HQR data fileMicrosoft Visual C++ v6.0 DLLPe123 v2006.4.4-4.12Private EXE Protector V2.30-V2.3X -> SetiSoft TeamtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!
[Authenticode]_176dba21.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.xdata
.idata
.reloc
.symtab
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path pe:exe~T1027~T1055>bin
Shape pe:exe>bin
malicious 2 nodes
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
Authenticode present at 0xC39800 size 8072 bytes
[Authenticode]_176dba21.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.xdata
.idata
.reloc
.symtab
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙