Deep Malware Analysis of 111eebbdb30ac11494f769e6652d32f1 | md5: 111eebbdb30ac11494f769e6652d32f1 | CAB:COMPRESSION:LZX | Executable | PE (Portable Executable) | PE File Layout | Win 64 Exe | x64 | PDB Path | AutoIt | Suspect | Decompiled | PE Memory-Mapped (Dump)

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	111eebbdb30ac11494f769e6652d32f1
Sha1	14968edb0bcd9fde9d3151872dba0fe40318571a
Sha256	533a9a6ff75a172b2e996391ad2dd93e615b31fd6f920e28a111f94284400440
Sha384	5933dbcef571022b28f4d5ed596fe55ba60c8c8764706e48358da506127c83e9c0f749c68e2c4bd211430bbba21512a1
Sha512	491dd67fd06871fb87622ace65431813750c81b4ecc82ef6ee67c086d95aa45ae937f95e84878b8aab2944cf97312c05d7e00d79453b388155a2cb7bcc834d65
SSDeep	24576:w/uno+72IgalbAco+P94kfjdpGW+4QmeWvf6GlIY6Ih+:Pmc32+PGW/QmeWvrL6I
TLSH	EC4523A111F08577F97A93790CE6C223A532BC905B758B8F2396B29E1F33AC05532767

PeID

Microsoft Visual C++ 8.0 (DLL)

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 7 STICH kept: 1secondary ignored: 6

bin 4img 2

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:exe>pe:autoit>pe:autoit

Shape pe:exe>pe:autoit>pe:autoit

malicious 3 nodes

Name	Value
Info	PE Detect: PeReader OK (file layout)
Info	PDB Path: wextract.pdb

PE Layout UNKNWOWNsuspect

Memoryhuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential