Suspicious
Suspect

b2cb006f152f52b4e50f4660159e9a45

PE Executable
MD5: b2cb006f152f52b4e50f4660159e9a45
Size: 3 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 b2cb006f152f52b4e50f4660159e9a45
Sha1 34e4716354e462e1de371e24340b8d853b5a4b0c
Sha256 d1b47b3b16093bdd2b02bd8aeec939340ee19ae82de963cc9e0d6db5538bcd3c
Sha384 7fdb51c59c2b2957603129b0e273bc252f60db4282c32ad88aaef52f33775487a89ec9bc8954da433aca0db71881a00a
Sha512 6fa4cabbf2511f49b061806e36ddc645fb1d37fa029adf03ee5c31ef9df716f67a8ede51955aa9e876a65464fab26e91ae925f76ce69083868148bd4f5302454
SSDeep 49152:s5pAMVSeqquds5cs5JTpwGorviGI0q1ISnyeAulbx4kUogu4e7GS17EPyRny0ctA:On1qtds/5JTSfvL1q1hsun7gun1/By00
TLSH B3D5239E7CB30574D83BC3A58D93F09CB26E7B464E558D5BB68C6B004D039A46C36B3A
PeID
Microsoft Visual C++ v6.0 DLL
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.@ >
.2tw
.pF?
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path pe:exe
Shape pe:exe
1 nodes
Name Value
Info
PE Detect: PeReader OK (file layout)
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.@ >
.2tw
.pF?
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙