Deep Malware Analysis of 319f3c3edafcebfa727476e7ab393e55 | md5: 319f3c3edafcebfa727476e7ab393e55 | Executable | PE (Portable Executable) | PE File Layout | Win 64 Exe | x64 | PDB Path | AutoIt | CAB:COMPRESSION:LZX | Suspect | Decompiled | PE Memory-Mapped (Dump)

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	319f3c3edafcebfa727476e7ab393e55
Sha1	9df366d56d792cf2a9b7b1b588405f061a1ad6dd
Sha256	96eed3775bfd7e33d6c1bb339f7cb2c6b9119e3172215835b84d33fa1f45e643
Sha384	4a05104a03c947df4e97ae3b8764244ec75e27ee2d91d9d4bcee3a8a56bf3e09f956b154f52fe4c3600925e960af8cda
Sha512	892c03622dd1373b4263685fe212489a4c061d10845d01ff9b71a0969232656aaa69acf45e938e945959c1b8e6e30c5f3fe178d4a94e1c9bb7bbcb09d7c307ee
SSDeep	49152:WkfovDwaxCH/WmLWoi3xS0TASv9hiXScH4:2Eu34crv9YScY
TLSH	3D85335396E88467F6A7377CA9F12323B2793CA01B7393DF66406A9C29337C25531722

PeID

Microsoft Visual C++ 8.0 (DLL)

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 8 STICH kept: 1secondary ignored: 7

bin 5img 2

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:exe>pe:autoit>pe:autoit

Shape pe:exe>pe:autoit>pe:autoit

malicious 3 nodes

Name	Value
Info	PE Detect: PeReader OK (file layout)
Info	Authenticode present at 0x1AD200 size 10152 bytes
Info	PDB Path: wextract.pdb

PE Layout UNKNWOWNsuspect

Memoryhuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential