Deep Malware Analysis of 354e10dff5df9290cf533edfa6aacb2c | md5: 354e10dff5df9290cf533edfa6aacb2c | Executable | PE (Portable Executable) | PE File Layout | CAB:COMPRESSION:LZX | Win 64 Exe | x64 | PDB Path | AutoIt | Suspect | Decompiled | PE Memory-Mapped (Dump)

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	354e10dff5df9290cf533edfa6aacb2c
Sha1	efa033dfa19e6fabbca8e3af9f416b2bcba72d94
Sha256	09d980d295bc92df536ea2e2d6b37fb8eda7b1ea87a05bd97415c8d6dbe40bd2
Sha384	4e3c58c2d48a55ff8e933aa4f4ad0dbdd58cc19d09e9e589bef16b62e3f7d46711dd0ac2c3bc5bf871562362a6ddc168
Sha512	c244e3ea1a46b51631be9855b93f55360c03d30eb0d9c0b4d4bd074876a84d78e8e740ad389204889a43c7bbe52c73a2f55c73fc6e04928a61bcfd8ea9c4a05c
SSDeep	49152:51I1/blGG8qk1RM9z4IDcWvemP8jXUmUFPYuCrQL+U4O:5SGBqk1RMtxcSemTFAuCcL+VO
TLSH	2995334117C52186EC3C9B305CFA834A4C703CC26BB95AFF6299BC891D63EE2A931757

PeID

Microsoft Visual C++ 8.0 (DLL)

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 7 STICH kept: 1secondary ignored: 6

bin 4img 2

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:exe>pe:autoit>pe:autoit

Shape pe:exe>pe:autoit>pe:autoit

malicious 3 nodes

Name	Value
Info	PE Detect: PeReader OK (file layout)
Info	PDB Path: wextract.pdb

PE Layout UNKNWOWNsuspect

Memoryhuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential