Deep Malware Analysis of 48418be99b4e4d56c04a689eb8b4d8b3 | md5: 48418be99b4e4d56c04a689eb8b4d8b3 | Executable | PE (Portable Executable) | CAB:COMPRESSION:LZX | PE File Layout | Win 64 Exe | x64 | PDB Path | AutoIt

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	48418be99b4e4d56c04a689eb8b4d8b3
Sha1	291c50d9db8f37d151a8acdfea5d0b3c77b54acb
Sha256	c9f156cb719e0a71e4087ae26b108ad3745d14ed1d06314596acb929d8bc8a5f
Sha384	9d424cd81540185f576e0103439f0dd755e75aa28d5325dbbb54e0cc20ccbc47f9aa87ea5d10cd6abfd10cb70cf83fe5
Sha512	80a9e738e86e10b7f3f5259844a4c4bfb9fd7f0ca8e4a62e8309bc89d12143f9a1ce9dca6e63de0199b38296d9d79a3299468a7c19350d950bc21a2f5212f377
SSDeep	49152:2GIICojn9rRViKSJDiLcwHI94MNp7PVHaBc4CaRiDYhhp66/+/XZY:2INnYDi304sLVRsiDuhp2
TLSH	99A5232016C6945FF7B127B9A8F9C14772FD7D0C0A7A0EEF2E55728A4B1638548FA306

PeID

Microsoft Visual C++ 8.0 (DLL)

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 6 STICH kept: 2secondary ignored: 4

bin 3img 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:exe>pe:rsrc>pe:autoit

Shape pe:exe>pe:rsrc>pe:autoit

3 nodes

Path pe:exe>pe:autoit

Shape pe:exe>pe:autoit

2 nodes

Name	Value
Info	PE Detect: PeReader OK (file layout)
Info	PDB Path: wextract.pdb