Deep Malware Analysis of 169fbede3bb64c090d9a9afb47028858 | md5: 169fbede3bb64c090d9a9afb47028858 | Executable | PE (Portable Executable) | PE File Layout | Win 64 Exe | x64 | PDB Path | AutoIt | CAB:COMPRESSION:LZX | Suspect | Decompiled | PE Memory-Mapped (Dump)

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	169fbede3bb64c090d9a9afb47028858
Sha1	90ec4f7b57b2042b203a24afa09e94619c3fe66b
Sha256	af0e3ab0f2333998f0c457e0f4119a1554dc0e834d868b61bc4b7035904a2e8a
Sha384	b3564331b8964fb665b708e0abffbd68e8605305568fb81a0182c3d7e3a17c9eba9671326274221c53a9850a30ac4f01
Sha512	58fd4edf778469443bdc4464725274679a19bea511a3b679c01030e14181a04e6918501ffcab617832998e89432566e8304ad96f931224ed6c92342106d5c03b
SSDeep	49152:fLXqHvWEtzPra+Wxc2fJCrCgz5BvqA0cHPBvx+IW:fLX3EVHWxfQr1zTqA0cvBvE
TLSH	5085230352D80592E4BD0B7189FA42976932FC531A785E9F3790AD960FB3FD5AD3230A

PeID

Microsoft Visual C++ 8.0 (DLL)

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 7 STICH kept: 1secondary ignored: 6

bin 4img 2

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:exe>pe:autoit>pe:autoit

Shape pe:exe>pe:autoit>pe:autoit

malicious 3 nodes

Name	Value
Info	PE Detect: PeReader OK (file layout)
Info	PDB Path: wextract.pdb

PE Layout UNKNWOWNsuspect

Memoryhuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential