Deep Malware Analysis of 62880a1fb862a5daa8685846a387f379 | md5: 62880a1fb862a5daa8685846a387f379 | Executable | PE (Portable Executable) | PE File Layout | Win 64 Exe | x64 | PDB Path | AutoIt | CAB:COMPRESSION:LZX | Suspect | Decompiled

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	62880a1fb862a5daa8685846a387f379
Sha1	2a45af2503eb748407bc0536b982333b268f872d
Sha256	4b00c7ebad267025b84e7b4d1c996eaefec34a065913d73ee0070b119217d1be
Sha384	8cd9b1288d8fc9513248e8865bc50839f67fec451e12b20db8c18b6d853b65e7e92169687fa142d1f3f2dd3cfec9f1ce
Sha512	f9e7baed077641488aeb483324ce28d30bd4f914245d2c4d4e5146696a529112b93f188382f1c5543b5de0f769e05d574627f1f8d4e9c758969b2cadf3a71d8a
SSDeep	24576:V8uWkRsNLTBaCu8ZnB16ev1RVNaZLS4I26G7HgMNdnq9lRe7l+CvAIyLZBeBJJer:VvtRsNLUCHB16c3aZGKtU9lReJ+AAMjz
TLSH	FF75231153F959B2E43A83B8D9E0C5936631FE529BB942CB22C8D85B5E237C2F635321

PeID

Microsoft Visual C++ 8.0 (DLL)

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 7 STICH kept: 2secondary ignored: 5

bin 3img 2

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:exe>pe:autoit>pe:autoit

Shape pe:exe>pe:autoit>pe:autoit

malicious 3 nodes

Path pe:exe>pe:rsrc>pe:autoit

Shape pe:exe>pe:rsrc>pe:autoit

3 nodes

Name	Value
Info	PE Detect: PeReader OK (file layout)
Info	PDB Path: wextract.pdb