Suspicious
Suspect

e5aa3259cf9350800b78a1612db11a3c

PE Executable
MD5: e5aa3259cf9350800b78a1612db11a3c
Size: 3.03 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 e5aa3259cf9350800b78a1612db11a3c
Sha1 bc3b1f2f8135a55678295a67d3b1bd07b36737af
Sha256 f1d8ccf9d1d0944b90cf07c5f085dac72a84cf9c1d56efb5cdc47606106fa260
Sha384 5c8cb220fd7f380c6cb30490d0ccd96ecc3aae4954be1e852ebb1140e564b97fdd9ca9a3ca03ff6f1cce6601a1a7cf0c
Sha512 2426850221e1827f4946fa518c446792bb5149d4cb8124fd15cd1bc41df51d411a193f4e6181c91676076205f3295371b6ed547416ac1637f6fb15ab05d2f250
SSDeep 49152:Q0PulMAghffyvPzCJI9N9awGyFFn1amlUY3kh9X79/m/DyJjH57HlfTHjf:Qyhinz59DGyF9E6r3kh9LDF59j
TLSH 72E52344FD827976E032C3B746D3B07D30693B858A348D8E7BC96741AE12A297D7B346
PeID
Microsoft Visual C++ v6.0 DLLVMProtect 1.70.4-> phpbb3
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.de4
.+74
.I4h
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path pe:exe
Shape pe:exe
1 nodes
Name Value
Info
PE Detect: PeReader OK (file layout)
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.de4
.+74
.I4h
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙