Deep Malware Analysis of 234bb25b1878650381668ca32a7254db | md5: 234bb25b1878650381668ca32a7254db | Executable | PE (Portable Executable) | PE File Layout | Win 64 Exe | x64 | PDB Path | AutoIt | CAB:COMPRESSION:LZX | Suspect | Decompiled | PE Memory-Mapped (Dump)

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	234bb25b1878650381668ca32a7254db
Sha1	5aa7cd09afef09c7b3b3bd7c401f776ecab0b18a
Sha256	d4e81a7304049c20e0b606220ff924dc48c70d46a8ab466c97d7c6a896e886f5
Sha384	ca155f1aab636a1f28052514a3679ea69c105b621dd58f9c4fb8c6837d166e1b34bc1b588207b255626cd217bcec076f
Sha512	4bb784e81ab8573e569438e795327fee5e4cc4be90c75d0d17b258e36c468e76df897c40fed1ab175054676f9ea919e11bda43550721abd5399cb23449c37bf7
SSDeep	49152:KNT7agYvl+bxc+4X6N/wFKZgyRBwD2nIUTKsp:KNT71YMdc+4KFwYZ5IUeW
TLSH	C5C633E116E94973E6793FB444F10561EF7B7C9016324ECF26B866881932BC1A63436F

PeID

Microsoft Visual C++ 8.0 (DLL)

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 6 STICH kept: 1secondary ignored: 5

bin 4img 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:exe>pe:autoit>pe:autoit

Shape pe:exe>pe:autoit>pe:autoit

malicious 3 nodes

Name	Value
Info	PE Detect: PeReader OK (file layout)
Info	PDB Path: wextract.pdb

PE Layout UNKNWOWNsuspect

Memoryhuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential