Deep Malware Analysis of 040b65e7b991e772aac124dd1664dcc1 | md5: 040b65e7b991e772aac124dd1664dcc1 | Executable | PE (Portable Executable) | PE File Layout | Win 64 Exe | x64 | PDB Path | AutoIt | CAB:COMPRESSION:LZX | PE Memory-Mapped (Dump)

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	040b65e7b991e772aac124dd1664dcc1
Sha1	b7c2d058ae105e65cec9c0d90d0e8550b00ae26c
Sha256	e30cb7c91bfab4c261e8bb3f183a5df5b6957e5ebd22d754c2d13fffdb9d9eee
Sha384	4cb979b1dcf3b7c84910997c814cec7159f13f30b6a6589d9158271c1cd922399a0f05f4c04bec1426d5e6066afb16ae
Sha512	5b8bf9e1b80fcb75cd27b018f996c42c91a71eac739618657efcccb80ce20d63cfd21411f5f8b610bc9f5a6426526e6129f9f74d7bc2cacd8ff9b4af2aaf51d0
SSDeep	98304:S48axesGEKDlNgTlH7lHrwURUIQYtuwNK7fXZWp+6E9Zgghpmmsym:SO1GEKPgTNRHr4I5uwNK7xWr4WEpmm8
TLSH	2046336797910094E0321FBE6CEB18A14D737CD97B2D129F1580BB9B1DF37E226A071A

PeID

Microsoft Visual C++ 8.0 (DLL)UPolyX 0.3 -> delikon

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 7 STICH kept: 1secondary ignored: 6

bin 4img 2

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:exe>pe:autoit

Shape pe:exe>pe:autoit

2 nodes

Name	Value
Info	PE Detect: PeReader OK (file layout)
Info	PDB Path: wextract.pdb

PE Layout UNKNWOWNsuspect

Memoryhuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential