Suspicious
Suspect

b99a20bf4e1e47b352263c72c66edda5

PE Executable
MD5: b99a20bf4e1e47b352263c72c66edda5
Size: 15.36 KB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 b99a20bf4e1e47b352263c72c66edda5
Sha1 4a7c413d9e2557563e34a66ac9b1b6a5f755c39c
Sha256 611b5cd0374479c60257804bc603a022d95fef09d216c1c83ce3acd40eb50d86
Sha384 d528d7c4b6c95ca4b23ef4db42b63b2f5ca6616506fa9651f76ce0a036651b696793f25ca9715f00210d99a4c6a1e64a
Sha512 bf9031d0271a0626ed3c16bfaa46bd0d139c9d002289412a2262533f1daf54191d358c63862e2311dd40aa4f68cb62167c7118c808be42242992cedb3bd51391
SSDeep 192:fqHOoLPoHeVQBNBY0fidcj3wJLsN3AAK8BzvTt1NpkAm1paLsehDPP0B46UT1Bgn:fKOe2/7c9sN3zfZR1m+RGm16C
TLSH 2B62B686D9922F5CCE4FC0703B11FA68B970369086566AE3DBD28D215DA39D00064FBD
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.reloc
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path pe:dll
Shape pe:dll
1 nodes
Name Value
Info
PE Detect: PeReader OK (file layout)
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.reloc
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙