Suspicious
Suspect

b580d4c4af856a61c9e0bd8a4a4f9817

PE Executable
MD5: b580d4c4af856a61c9e0bd8a4a4f9817
Size: 2.95 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 b580d4c4af856a61c9e0bd8a4a4f9817
Sha1 550b81cc74f4610c7474b7cae6a183223ed29c48
Sha256 9003e39ec422f18c288e3b5d6b15fc0385d2e81bbaacf245e856d558537d0df7
Sha384 d1208030ad08558e1d1a39f96cf58389387c548d6e650060d33facd82ff779bc5d8f982266aaf9654583482be9cccd2e
Sha512 7cc7f4c49a87c6088f1e03622bdd117dee748a730e5a896e9c8a03df5775ead09e00c56b0726e0f2eb62230c9c680541eaec544c6b4159231bb9921dcaf13744
SSDeep 49152:M/BYH50MW/myctQgPb7jGdl16Edkt4vfpbR2m3IBvS5gx0Kb2Rl/2ZG5dJg5B1z:35R7QgTfGAPmvfVR2m3GvSW0KgF2I5Q5
TLSH 04D52344FDF60DB5D832C3B79593707EB1683B544AA48C6372C86F007D12A696CBAB39
PeID
Microsoft Visual C++ v6.0 DLLUPolyX 0.3 -> delikon
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.jY{
.q;x
.&n-
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path pe:exe
Shape pe:exe
1 nodes
Name Value
Info
PE Detect: PeReader OK (file layout)
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.jY{
.q;x
.&n-
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙