Deep Malware Analysis of 03b94adff98fbfbb10ce48f9d291c7f9 | md5: 03b94adff98fbfbb10ce48f9d291c7f9 | Executable | PE (Portable Executable) | PE File Layout | Win 64 Exe | x64 | PDB Path | CAB:COMPRESSION:LZX | AutoIt | PE Memory-Mapped (Dump)

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	03b94adff98fbfbb10ce48f9d291c7f9
Sha1	258ea38aaa1995556296ca1da21f9856082caae4
Sha256	9da3fb0d1f8c3547f2ccb2ce8f853b640cbbfa5fb9b3cb64a662828c3447dccc
Sha384	88e3c8c726412587ce6956392e3a268d09487ad9f24ae85adb75388e3da171e11367970cf53b247a0fed9b4167c03950
Sha512	e6f25fb099a3bd3f40b87d000c4ede8d4063475453cf66d8ebe2310d16a24fb94a1de1d32f1b9d7229523fe7a802a860318f9b0a344b848d9d0e4b5233ebedc6
SSDeep	49152:/p4Q0HE0bLxQbbSCvsFHDKNkMZXCB9jEWK9cQ0D9NMeKYmUyeGKd:/p4QqhRRcPhXigWK9cVDQYmLK
TLSH	C4A52301B2E908BFF8B4137959F280A79A3538C15739D6CF5664D70F1E326E66A7230B

PeID

Microsoft Visual C++ 8.0 (DLL)Microsoft Visual C++ v6.0 DLL

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 7 STICH kept: 1secondary ignored: 6

bin 4img 2

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:exe>pe:autoit

Shape pe:exe>pe:autoit

2 nodes

Name	Value
Info	PE Detect: PeReader OK (file layout)
Info	PDB Path: wextract.pdb

PE Layout UNKNWOWNsuspect

Memoryhuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential