Suspect
af859b6ba2f4b4316b9afda3659d5d9b
PE Executable
MD5: af859b6ba2f4b4316b9afda3659d5d9b
Size: 6.25 MB
application/x-dosexec
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
Symbol Obfuscation Score
Very high
| MD5 | af859b6ba2f4b4316b9afda3659d5d9b |
| Sha1 | 9e3838e5853c833ad923689f76606ab367bd85cd |
| Sha256 | db6ab3a42131bb24be34abbde57bdc3e3b189b7e9801a3e4e30c7304367fd507 |
| Sha384 | 44fc6e7387514ecdfa4a3f1103e6ead341e2674fd1d95ebdcb0a43610aea054b6bcd0cb6e7571baf50c20f2d8efa7759 |
| Sha512 | 1e721bbe7d48a4f1ec7e1384a406dfd297a06aaffd0e8367f4c9732042b19e9b103e69d39df18a99eaa4925a9deff04ed2f16146c2cae4472fe3ea4e6691573c |
| SSDeep | 98304:+FWAf2wVDrS2Zm2e/yXwRYhTex8JZbBZ6mJy8TxijMkTMQKqp7U3Sk:gWO28RZmPyXweACdZFQ8TxV+HJgSk |
| TLSH | 185633EC3651BACDDDA3E4328DA51C60E6712EBF1317CB2B9613515AD85EDDACE000B2 |
STICH
beta
No STICH Path has been generated for this analysis yet.
1 structural branch were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.
bin
1| Name | Value |
|---|---|
| Info | PE Detect: PeReader OK (file layout) |
| Module Name | Steal.exe |
| Full Name | Steal.exe |
| EntryPoint | System.Int32 <Module>::(System.String[]) |
| Scope Name | Steal.exe |
| Scope Type | ModuleDef |
| Kind | Windows |
| Runtime Version | v4.0.30319 |
| Tables Header Version | 512 |
| WinMD Version | <null> |
| Assembly Name | Steal |
| Assembly Version | 1.0.0.0 |
| Assembly Culture | <null> |
| Has PublicKey | False |
| PublicKey Token | <null> |
| Target Framework | .NETFramework,Version=v4.7.2 |
| Total Strings | 2 |
| Main Method | System.Int32 <Module>::(System.String[]) |
| Main IL Instruction Count | 0 |
| Main IL | — |
No malware configuration was found at this point.
You must be signed in to view YARA rules.