Suspicious
Suspect

ebfeda6b74b932d61858bd4f9f0e7414

PE Executable
MD5: ebfeda6b74b932d61858bd4f9f0e7414
Size: 4.25 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 ebfeda6b74b932d61858bd4f9f0e7414
Sha1 f8c8753d47afdf5d50cad5be30b5e4c7869cfb07
Sha256 e78d5c1530afc8284fa602b221cfe47c25ff7a6d12549d300d61143da67b2aa4
Sha384 ccbaf5ca7835e99364282824fb64f17c9d2f9133c111efee1eff0a0a58b98504ed5cde6c8e96fae346eb530b9a4fb0a6
Sha512 5060628f0fbdc21c796c36e544dd4607dcf359972fb1a533bccc992a6a35f6290b0d89bfefd718d21cee29dc93484c0526f04e0b93ae1f97231ac6eb41471a1b
SSDeep 98304:QpARhuQrqELi4HKLcFNilnt267WF/vH5FKFE:Qp6huii4qLcV82vH5IFE
TLSH 4A1612C2E7D1132CC5351978756E187182A3BE224DAFBEA74DEE7713422496B701E32E
PeID
Microsoft Visual C++Microsoft Visual C++ 5.0Microsoft Visual C++ 6.0 DLL (Debug)Microsoft Visual C++ v6.0Microsoft Visual C++ v6.0Microsoft Visual C++ v6.0 DLL
Laingproorprad.zxwg
Naendkreakfod.yd
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.gfids
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:1033
ID:1033-preview.png
ID:0002
ID:1033
ID:0003
ID:1033
ID:0004
ID:1033
ID:0005
ID:1033
ID:0006
ID:1033
ID:0007
ID:1033
ID:1033-preview.png
ID:0008
ID:1033
ID:0009
ID:1033
ID:000A
ID:1033
ID:000B
ID:1033
ID:000C
ID:1033
RT_GROUP_CURSOR4
ID:0001
ID:1033
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0001
ID:1033
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.gfids
.rsrc
.reloc
Resources
RT_STRING
ID:003F
ID:1033
RT_VERSION
ID:0001
ID:1033
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.data
.idata
_RDATA
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.rsrc
Resources
RT_ICON
ID:0001
ID:1049
RT_GROUP_CURSOR4
ID:0065
ID:1049
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0001
ID:1033
PDB Path PATH
C:\buihuhuhuhuhuhuhuhuhuhuhu
PDB Path PATH
C:\buihuhuhuhuhuhuhuhuhuhuhu
PDB Path PATH
vcrunthuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
Laingproorprad.zxwg
Naendkreakfod.yd
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.gfids
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:1033
ID:1033-preview.png
ID:0002
ID:1033
ID:0003
ID:1033
ID:0004
ID:1033
ID:0005
ID:1033
ID:0006
ID:1033
ID:0007
ID:1033
ID:1033-preview.png
ID:0008
ID:1033
ID:0009
ID:1033
ID:000A
ID:1033
ID:000B
ID:1033
ID:000C
ID:1033
RT_GROUP_CURSOR4
ID:0001
ID:1033
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0001
ID:1033
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.gfids
.rsrc
.reloc
Resources
RT_STRING
ID:003F
ID:1033
RT_VERSION
ID:0001
ID:1033
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.data
.idata
_RDATA
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.rsrc
Resources
RT_ICON
ID:0001
ID:1049
RT_GROUP_CURSOR4
ID:0065
ID:1049
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0001
ID:1033
No malware configuration was found at this point.
PDB Path PATH
C:\buihuhuhuhuhuhuhuhuhuhuhu
ebfeda6b74b932d61858bd4f9f0e7414 › 7z-stream @ 0x0003C547.7z › PeerUnit.exe
PDB Path PATH
C:\buihuhuhuhuhuhuhuhuhuhuhu
ebfeda6b74b932d61858bd4f9f0e7414 › 7z-stream @ 0x0003C547.7z › python36.dll
PDB Path PATH
vcrunthuhuhuhuhuhuhu
ebfeda6b74b932d61858bd4f9f0e7414 › 7z-stream @ 0x0003C547.7z › VCRUNTIME140.dll
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙