Suspicious
Suspect

fede437f58ab0f84d820b7282d470caa

Share on LinkedIn
Print
PE Executable
MD5: fede437f58ab0f84d820b7282d470caa
Size: 206.85 KB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 fede437f58ab0f84d820b7282d470caa
Sha1 248fb1745ef2d11301f2b003b5fab87b436f4cc0
Sha256 e1c289d5b8dcab62f8dad6179bf64ef621b6931de3aafb451a68a8a6cb7c2a7f
Sha384 4c51b3778d5b217ea45375abb517280881b1569a40419c8d2a031f476b4c008fd5b9bb6906da2c0bd6121aab451615f5
Sha512 8f166ceb043bc4a9fb9defc903125ce3b83ac2f91c17315854dd3c7f441a835dd68f0a150c8d4d3de00d743f114cb476d8d51b9ccc532363ea02f7c78375c4db
SSDeep 3072:8iYn74nwjJAr9gfkdUkQm+siu7eLzE/terXE9gCkjrJ4pG9e94IQCS:IcnyktQzaeL4i0qCoV4pGl
TLSH 52146C267A46A8FCE446C174C316D573677278C90F22B9FF11A462382F6AAE12F3D714
PeID
Microsoft Visual C++ 8.0 (DLL)Microsoft Visual C++ v6.0 DLL
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.reloc
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path pe:exe
Shape pe:exe
1 nodes
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
PDB Path: xplane_bridge.pdb
An error has occurred. This application may no longer respond until reloaded. Reload 🗙