Deep Malware Analysis of 00d3c17953afb258440c9eb9e15e30b6 | md5: 00d3c17953afb258440c9eb9e15e30b6 | Executable | PE (Portable Executable) | PE File Layout | Win 64 Exe | x64 | PDB Path

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	00d3c17953afb258440c9eb9e15e30b6
Sha1	23902109c0301caec968660ea08cd5cd165354e2
Sha256	52a1f9aebd6d8f42ed0fa9a36c8c0cea56dccaa7ab941a62c7d70be02479f6d9
Sha384	7c510687af5d3e58244200d9f803ca5447caec4049d5578cd061fc24e1e4755e9c496d1cfc4168e58cfda3c4ce7b0261
Sha512	899b65a29a4e4f2acc9e6e142560391ad72fcbee7566c53133bbf5e1bfdc960fd5ec7d6b4d4c254ac58709500e42628e099e521d37b9768aa03256537ef66c97
SSDeep	393216:Ghd01M3OWld0GIAh6OK9XMCHWUjX6cuI3/PGTAI:G7RdtsO0XMb8X3H/O7
TLSH	1CE6335C6EC402EFD9B3003CEEF26699E926B4724731CE9F17AC92622E530D48D3565B

PeID

Microsoft Visual C++ 8.0Microsoft Visual C++ 8.0 (DLL)Microsoft Visual C++ v6.0 DLLUPolyX 0.3 -> delikon

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 3 STICH kept: 1secondary ignored: 2

bin 1img 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:exe>scr:vbs

Shape pe:exe>scr:vbs

2 nodes

Name	Value
Info	PE Detect: PeReader OK (file layout)
Info	Overlay extracted: Overlay_0e73a00c.bin (13990489 bytes)
Info	PDB Path: t$mn