Deep Malware Analysis of 61e7b67b3ca5412726f99a469d54c545 | md5: 61e7b67b3ca5412726f99a469d54c545 | Executable | PE (Portable Executable) | PE File Layout | Win 32 Exe | x86 | AutoIt | Suspect | Decompiled

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	61e7b67b3ca5412726f99a469d54c545
Sha1	8b78edc4466399b0a4158f018f614dcf01f255c4
Sha256	2b2cf3626f4d79fa2b10001f024b86677c63e2381f0923331924d26b1ee676ba
Sha384	5160ded37f34051b8fd4a015c7df1bf4ea541b9fefe63212a5d991e611c7417149b364912dcb835fb6f223a21505e1de
Sha512	c985751d036eb24876d14458ce5de09856604ef898fc594ced93ce4cd52224b2e21bda376bd9bd7398f3433980a7be95a9f2fa1ea6ea846d938dc50f33df0597
SSDeep	24576:3hloDX0XOf4btEJNO5HjXp/LI6oVjbBqsTg92lz:3hloJfsEvUHLpDoBqsTi2l
TLSH	9435132A4E8BBCDFE41459B45496DBD6066CDFA5B4E506EC30E4EF3DA3A24748600FB0

PeID

UPX -> www.upx.sourceforge.netUPX Modified >> *$igBy Ahmed18UPX v0.89.6 - v1.02 / v1.05 -v1.24 -> Markus & Laszlo (overlay)]UPX v1.25 (Delphi) StubUPX v3.0

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 4 STICH kept: 2secondary ignored: 2

bin 1img 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:exe>pe:autoit

Shape pe:exe>pe:autoit

malicious 2 nodes

Path pe:exe>pe:rsrc>pe:autoit

Shape pe:exe>pe:rsrc>pe:autoit

3 nodes

Name	Value
Info	PE Detect: PeReader OK (file layout)