Suspicious
Suspect

f2afd561a437cee8c084dd1d246abd36

PE Executable
MD5: f2afd561a437cee8c084dd1d246abd36
Size: 15.36 KB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 f2afd561a437cee8c084dd1d246abd36
Sha1 bfdaff8836824c22b10eee855351291838edbb9e
Sha256 5d54cfae11351d3ecd8c02614315ffadc053cb5afdfeab598ce8fee32287e699
Sha384 ff1c0072cb5db2d500d3a36f5b542b98aca3718cb8b5a41f63f051c57a04629e7b4dab02e8d70be7df9174d2c1062a88
Sha512 778271c94a1b8898902b23ff3f217e59b0ed4700a79f45dfa460a968a7582cf06e1136c6b15ca7ab1af85b0fb669c361ae3722f5e64166451fa60bacff11c712
SSDeep 192:fqHOoLPoHeVQBNBY0fidcj3wJLsN3AAK8BzvTt1NpkAm1paLsehDPP0B46Upnb3e:fKOe2/7c9sN3zfZR1m+RGcn76C
TLSH 3262D68AD8926F6DCF4FC0703B11F9787DB136D08A6659E7E7928D3149A39D04024FB9
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.reloc
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path pe:dll
Shape pe:dll
1 nodes
Name Value
Info
PE Detect: PeReader OK (file layout)
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.reloc
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙