Suspicious
Suspect

b1680963d810d9d89c1c81bd311d0f1b

PE Executable
MD5: b1680963d810d9d89c1c81bd311d0f1b
Size: 3.01 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 b1680963d810d9d89c1c81bd311d0f1b
Sha1 475c5e64323e808944a361fe3a7590a183749ff9
Sha256 478a5d81892f27b5d5fb05e4667d16d86ee2c8dee5882c52e4377123cd88526e
Sha384 95fee6c976256b33472b3cd4a433034f9ed1bfd0133a620a221425bc54ef307f2e2b30255bb4e4dcd1a6faf362ab593f
Sha512 5816612b082c858efd38ede9312b841a32b033d339f43d6c7a6befddca268a3609a4ad00e033445983f96b6c7e859d601ed1750673f010764f6a25fd4d92e3a5
SSDeep 49152:aOt6jm1cytVlmgubFdkpuk3ZSrWcTVOo7suzw3lGAJ+bIPGI+IR52N1agaJu7q:aOWm1nlmgubFkSicB5su8fw6GF02N1oL
TLSH 55D5239EFC862070E433C7BB87D3206EB17937554B258C9EB2C8AB445E239186CB7765
PeID
Microsoft Visual C++ v6.0 DLLUPolyX 0.3 -> delikon
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.I^b
.g-l
.Tr5
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path pe:exe
Shape pe:exe
1 nodes
Name Value
Info
PE Detect: PeReader OK (file layout)
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.I^b
.g-l
.Tr5
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙