f16f6214bacabfe8bb4758e4e5f7d9cc

PE Executable

MD5: f16f6214bacabfe8bb4758e4e5f7d9cc

Size: 3.59 MB

application/x-dosexec

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

File

Type

Portable Executable file

Size

3.59 MB · 3,593,216 B

First seen

2026-10-25 08:00 · 15 hours ago

Last seen

2026-10-25 08:00 · 15 hours ago

Last analysis

2026-10-25 08:00 · 15 hours ago

Hashes

MD5 f16f6214bacabfe8bb4758e4e5f7d9cc Sha1 16bd7f8f1b205abbc9ea593111c68b3fd924bdd3 Sha256 0a0b3d7c1be53671707153d5c0d24f966fe5952892836f0fd02c5fbf3eff660f Sha384 91f40d2a67ceee99870f5e23033ce46a612d2110c5bc7c152c7f358a17da51c6a576bd0ce23c42a3cd59932980bd4a8a Sha512 f369b890582b66c3b28d6cd7e4c921181fcc0f1f4fc028647ac670fc4169c362cbd667d291ffea538bc1e31f98d8774ebcbad55fe97708b42ee8b30232c68f11 SSDeep 98304:+KqadPF0rKA7IM+wnYIVips0VmliIseO:+luPFonHYIkTWPPO TLSH 36F53369E40CAB02E69CC2F9E6A2181AB8F70AE42325C059F45931DFD1C47D1D9D1FEE

Detection

PeID

Microsoft Visual C++ v6.0 DLLUPX -> www.upx.sourceforge.netUPX 2.93 - 3.95 (LZMA) ASL sign UPX 3.02UPX v3.0UPX v3.0 (EXE_LZMA) -> Markus Oberhumer & Laszlo Molnar & John ReiserUPolyX 0.3 -> delikon

2 malicious · 2 files

EXEf16f6214bacabfe8bb4758e4e5f7d9ccGo Loader (Factory-v3)

Structure

EXE[UPX unpacked Lzma].exeGo Loader (Factory-v3)

Structure

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:exe~T1027~T1055

Shape pe:exe

malicious 1 nodes

Name	Value
UPX	UPX method: Lzma, filter: X86CallJumpBe
UPX	`UPX anomaly: PE reconstructed from saved NT headers; DOS stub retained; PE checksum cleared; overlay not restored`

2 malicious · 2 files

EXEf16f6214bacabfe8bb4758e4e5f7d9ccGo Loader (Factory-v3)

Structure

EXE[UPX unpacked Lzma].exeGo Loader (Factory-v3)

Structure

No malware configuration was found at this point.