Suspicious
Suspect

b8d891a1816d83f0874c7d9dbc029412

PE Executable
MD5: b8d891a1816d83f0874c7d9dbc029412
Size: 5.21 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 b8d891a1816d83f0874c7d9dbc029412
Sha1 8fe34b76772e0d973c77b3704045876acf403aba
Sha256 aebbe7f69b41abae122fd1895757acfa96ceaa1c462e98c29012df0808f1e0e4
Sha384 b9b6e2e39dc9a5a9f9fbd44f1423262ae22e0493f6b8ae08f473db9a6b1b0607f873d6536e69bff23c58c78fab3fd64e
Sha512 5582bba1f66a401d922b9c268a703f787618d7b80472a8bb23dcf7a671afcbce56fd7c01129326c0623dd3ab13ad4f44752d13fe26a091cf4a8f408932cacd85
SSDeep 49152:HEOegRz2w1EFKS8OTlWFuCzPldU3s5ML5EdlXvjEXf/lmZ:/2w+oaWFuwTIEd2f9
TLSH 74364947ED9545E9C0EED23186729252BA717C484B3167D72FA0F7382F76BD0AAB9300
PeID
HQR data fileMicrosoft Visual C++ v6.0 DLLPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.xdata
.idata
.reloc
.symtab
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path pe:exe
Shape pe:exe
1 nodes
Name Value
Info
PE Detect: PeReader OK (file layout)
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.xdata
.idata
.reloc
.symtab
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙