Deep Malware Analysis of 22572deb99904d6257b6326e4fcf0d3c | md5: 22572deb99904d6257b6326e4fcf0d3c | Executable | PE (Portable Executable) | PE File Layout | Win 64 Exe | x64 | PDB Path | AutoIt | CAB:COMPRESSION:LZX | Suspect | Decompiled | PE Memory-Mapped (Dump)

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	22572deb99904d6257b6326e4fcf0d3c
Sha1	6137850f5164e98e16cbe48abafe86114102bc27
Sha256	cdcf6356e2b101544a660c16e672ec81a0be2523f5bbee9abc36ae47ec93c8ea
Sha384	51e0cfcbfe9cdc63e4a5ae94a62a21d828a26a8a897b47dd57d7b4a829c57d06ad87ca1c165ccb44ff173550b7732f8e
Sha512	45aaf2287761a6a3bf1943268ac7367fcaf04f319ff4dbb31ebaf03e3881f551c5294926993028bc75b8134b03e4f38d935c7576a15d59223176c7dc6314dbdf
SSDeep	24576:826z5Ayhmpibv+RM3sODXlTucSw0RDPqKYuieywnzL0t++DPsEUxNzh0yktvBZ7:m1Ayhsib6eRtuY0wKYDVwzs+ePsEUXSf
TLSH	4C6523D193E184E9D1F5273088F3855B2572BC26977F46CF23442A4E1B23AD29A7E34B

PeID

Microsoft Visual C++ 8.0 (DLL)

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 7 STICH kept: 1secondary ignored: 6

bin 4img 2

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:exe>pe:autoit>pe:autoit

Shape pe:exe>pe:autoit>pe:autoit

malicious 3 nodes

Name	Value
Info	PE Detect: PeReader OK (file layout)
Info	PDB Path: wextract.pdb

PE Layout UNKNWOWNsuspect

Memoryhuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential