Deep Malware Analysis of 6d641891d96b7eb6ada396193e712400 | md5: 6d641891d96b7eb6ada396193e712400 | Executable | PE (Portable Executable) | CAB:COMPRESSION:LZX | PE File Layout | Win 32 Exe | x86 | PDB Path | T1059.005

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	6d641891d96b7eb6ada396193e712400
Sha1	e662d83958ebe68b6d967e2ef61810b552af6d73
Sha256	ec1b99b59303d939da8da59f7ab60c05833a0d918916efec1d662b0293eb0f2d
Sha384	fae9545cea0095f852678a4ecfc4bb674d9bf7a8c49d21797f177067714a5b7bafec61dbbf6ddde3eb70843a2c6ffc51
Sha512	64da36c8e6014d93fdb41f1f3cb792f16617043a8623eea6add20b9f854340a110f0ba0f5af42e5a29a06f7b5c4e112b623595be5d0be7783792a7376be2d7dd
SSDeep	12288:HF47wgy90CAQ2lmEwnLIJUdIYWfpZRUX49josgmtOdzvMM:Hezy4Q2lmEwL4aIF3RUIZEmQTMM
TLSH	1BE4121AB2E85072C8B517715CFB07930A35BCB047B4D6EB2B44B99A5CB32E4A971327

PeID

Microsoft Visual C++ 8

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 5 STICH kept: 1secondary ignored: 4

bin 3img 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:exe>scr:vbs~T1059.005

Shape pe:exe>scr:vbs

technique2 nodes

Name	Value
Info	PE Detect: PeReader OK (file layout)
Info	PDB Path: wextract.pdb