Suspicious
Suspect

d1fa9ad68e019e06614eaacae90e1aa7

PE Executable
MD5: d1fa9ad68e019e06614eaacae90e1aa7
Size: 3.59 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 d1fa9ad68e019e06614eaacae90e1aa7
Sha1 01a1bb75267c67d2fa342708705b1de24245e79f
Sha256 a793e4ad27f62cb4ab79a798a7883eb146c6fa12b2de5b3ee04e38eff75a6d61
Sha384 aeca88dd780d132768f0ca3f66894c55290aadf87bb79d6ddf8d3d45f4d5d988978cd3dfdbb69f52ebef232bd9e38ba8
Sha512 fcbfb0a22f9d91100a7d0bfedad14e7ee25fd3e32b6e011f206567a59def96b5e8c82d10216c508a682c0245ee21183955ed1d428c0eb70759065cf6c5992483
SSDeep 98304:bk9ZShKiiutLdShOATgx4O7mWhIQhadpK/YtjgPv3Le:bkzShKiiutLdSX83mWhIQhI0wt8fL
TLSH D3F53347CE81C84AD63FAFF1A4F91F6107BE9B320AA1D6D3D6D2A6D724334620549C23
PeID
Microsoft Visual C++ v6.0 DLLUPX -> www.upx.sourceforge.netUPX 2.93 - 3.95 (LZMA) ASL sign UPX 3.02UPX v3.0UPX v3.0 (EXE_LZMA) -> Markus Oberhumer & Laszlo Molnar & John Reiser
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
UPX0
UPX1
UPX2
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path pe:exe
Shape pe:exe
1 nodes
Name Value
Info
PE Detect: PeReader OK (file layout)
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
UPX0
UPX1
UPX2
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙