Suspicious
Suspect

dfff831794096cff134b8605ddb56b94

Share on LinkedIn
Print
ZIP Archive
MD5: dfff831794096cff134b8605ddb56b94
Size: 1.4 MB
application/zip

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 dfff831794096cff134b8605ddb56b94
Sha1 d75038b976f409d15e1cc47c2907429e6aecb77a
Sha256 a55a153e33610f6b87e358aca650bed11a4ac23bee6efbb60cb68372d95e1f99
Sha384 a8625136c33d6ac2f9b03c1335cfa710ff2a1e87f9eefa19a92d51bae3085c594683ae8c3b94c9560177a240e2925f78
Sha512 9a109fbcaa92f93b250f4b70e089130b7b923043a424f89e1dbf9e58d27d3e8dcb16731d9b4642fd22492f349c37d53ee646f73651f3016ad2864f11e72953db
SSDeep 24576:foZjxbq9j8XJlqrGAuImQIMESQ+hcqMXHC0Clwi6/CttWaRPbA+KCmzWY:foZ9bq+MmMEL+hcjXHC/wnwdPbA9Cmzx
TLSH E2553397813C24845F3E0B66A7FF856CB2248EFC10030C579B2A49B7293E69FC675997
dfff831794096cff134b8605ddb56b94
lua.exe
Overlay_79bfa68e.bin
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.data
.rdata
.pdata
.xdata
.bss
.idata
.CRT
.tls
4
19
31
45
57
70
81
92
lua51.dll
Overlay_dc2f2c25.bin
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.data
.rdata
.pdata
.xdata
.bss
.edata
.idata
.CRT
.tls
.reloc
4
19
31
45
57
70
81
92
Starter.bat
vm.txt
STICH beta

No STICH Path has been generated for this analysis yet.

3 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 3
An error has occurred. This application may no longer respond until reloaded. Reload 🗙