Deep Malware Analysis of 3f9d90923d2d9bba0de4e375d8f3cd11 | md5: 3f9d90923d2d9bba0de4e375d8f3cd11 | Executable | PE (Portable Executable) | PE File Layout | Win 64 Exe | x64 | PDB Path | AutoIt | CAB:COMPRESSION:LZX | Suspect | Decompiled | PE Memory-Mapped (Dump)

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	3f9d90923d2d9bba0de4e375d8f3cd11
Sha1	56a11de9764cb29c2821441b10bf68f2b9d1a40b
Sha256	f48debf0e99b16130594458c82205af33785a97f7d3df4cfed7cd30acd266b2d
Sha384	76e44e02ae8509ae45eb09f30638d133f72902b27728200665aa0ba8bfe7c1f06383d464a47a093867d984ed7dd1847e
Sha512	615a6624df6dfb2bdc7b8fefac057fe3c092cfdb193740f3a2baa5e1f2d055f6fa8d72406384168dbc14698ff2bec1a2d57bfebe023f2537d566a819c6e6969e
SSDeep	24576:UWSwy7GSBhKMijatSk5pOryr1agRRRxC3M8g2tX/OEH+GS/:XEBhKNjatSkey5agRDc3M8g2tPb+GS
TLSH	6A65230361E84846F5BD473689F7859B9234FC826B398ACF62A9490D1FB3ED0E13571B

PeID

Microsoft Visual C++ 8.0 (DLL)

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 7 STICH kept: 1secondary ignored: 6

bin 4img 2

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:exe>pe:autoit>pe:autoit

Shape pe:exe>pe:autoit>pe:autoit

malicious 3 nodes

Name	Value
Info	PE Detect: PeReader OK (file layout)
Info	PDB Path: wextract.pdb

PE Layout UNKNWOWNsuspect

Memoryhuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential