Suspicious
Suspect

f75a27455f6958635b8418efaa821afa

Share on LinkedIn
Print
JavaScript
MD5: f75a27455f6958635b8418efaa821afa
Size: 17.57 MB
application/javascript

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 f75a27455f6958635b8418efaa821afa
Sha1 bbf5679a9265f4f077636ecc01123b8a2fdad770
Sha256 e859a1ccabd0672c2ccf1f73b1052efc320e2e07275774560508f98278cebbfa
Sha384 1c17c5a4204ebf7652c360a67708d915b53905d0d90ce236118e2d03c186be95d6f9d88e13297996c434011c7a93f37a
Sha512 db1a7b4dd46400c16fa4aa27f6bf4f5d7c14a55aecec2111b82ad9f306e26f6bcf23fd2b2be33ba1eb3b11f28657338ea8dac9d4d990c932e193e6d5b19389f5
SSDeep 393216:J0L1F2UEgIfUKOc0XEAphVtnIwQSg+nFoIykzPQxvF7X2:CpsUE58KP0RphDBo+FoIygPyvF7
TLSH B00733A877454E64F8EF023CA9D08A22A2F1B5242B95D7EF0BF10D221D672D4DF747A1
PeID
Microsoft Visual C++ 8.0Microsoft Visual C++ 8.0 (DLL)Microsoft Visual C++ v6.0 DLL
Overlay_59b35be9.bin
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.fptable
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:0
ID:0002
ID:0
ID:0003
ID:0
ID:0004
ID:0
ID:0-preview.png
ID:0005
ID:0
ID:0006
ID:0
ID:0007
ID:0
RT_GROUP_CURSOR4
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
3 / 3
Path pe:exe~T1059.007>pe:rsrc>bin
Shape pe:exe>pe:rsrc>bin
technique3 nodes
Path pe:exe~T1059.007>pe:rsrc>img
Shape pe:exe>pe:rsrc>img
technique3 nodes
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
Overlay extracted: Overlay_59b35be9.bin (17219835 bytes)
Info
PDB Path: t$mn
An error has occurred. This application may no longer respond until reloaded. Reload 🗙