Deep Malware Analysis of 44408775e1a1725fec3b1edee91382c4 | md5: 44408775e1a1725fec3b1edee91382c4 | CAB:COMPRESSION:LZX | Executable | PE (Portable Executable) | PE File Layout | Win 64 Exe | x64 | PDB Path | AutoIt | Suspect | Decompiled | PE Memory-Mapped (Dump)

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	44408775e1a1725fec3b1edee91382c4
Sha1	8894879a0a9112f1e2455490346aa6be2908f2fe
Sha256	ae84577951a74e41e51851bddbe82bbb591fdaa973b6d54b5a4f3b7da419d495
Sha384	bc566051495a1db134b47410d5a65bae06228aff1fb37acf5239425bbddd3938749b8c3d8b6dd3452929fad4f924b0c5
Sha512	c3fea94cb22eeed0b7abc4bea4ce3b9a6b7ae2137ecd497d8839905bfc533f05d3c3d9cf73662c5f353b3c79e3f5f57c757565893df92f99726bbdf0ffab140a
SSDeep	196608:Q9VXDkYnUV7DTBSPDDJzN212t0FvTWLNuWyaHqN2:IVTxnUVnTBWDDJ5q4LNuWJH5
TLSH	D5763346D3E000EAF10AA3B264F19557AA72BC43477883AF276974B91F23587D573B23

PeID

Microsoft Visual C++ 8.0 (DLL)

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 7 STICH kept: 1secondary ignored: 6

bin 4img 2

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:exe>pe:autoit>pe:autoit

Shape pe:exe>pe:autoit>pe:autoit

malicious 3 nodes

Name	Value
Info	PE Detect: PeReader OK (file layout)
Info	PDB Path: wextract.pdb

PE Layout UNKNWOWNsuspect

Memoryhuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential