Deep Malware Analysis of 70f6dff404b94d943db1514648700cfa | md5: 70f6dff404b94d943db1514648700cfa | Executable | PE (Portable Executable) | PE Memory-Mapped (Dump)

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	70f6dff404b94d943db1514648700cfa
Sha1	d313053982390ae6a4707aeba20451cfc13fc88e
Sha256	507bbce068c50bc2e2c3907debe65c3bf974ac1c2ace16d15c952bd3a72c15f2
Sha384	fd0d30c495b36dfcca160f8aa7e85fe74c62a78f5f1924f0f884b467c59cc523582103fea00cc4248bcc75d7a1d9612c
Sha512	d472aa1da77d95ea58b532537c255d2b2569a6e75e2a7605f3b5ea22461e5765970fe39edc24e64841d853b3f8baabac19967ad3856eac90bc573bd7053da087
SSDeep	98304:DXDqPoBhz1aRxcSUDk36SAEdhvxWX9bI7XJo4jcqM:DXDqPe1Cxcxk3ZAEUXdIVljcl
TLSH	7A36488380071568E46D8971C2ED1BA0C92B5EB57A6CB08E6F17FA4A27F31D3F596D03

PeID

Microsoft Visual C++ 6.0 DLL (Debug)Microsoft Visual C++ v6.0 DLLMicrosoft v12.00 64bit C++ DLL - sign ASL ( 64 bit ) UPolyX 0.3 -> delikon

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:dll

Shape pe:dll

1 nodes

Name	Value
Info	PE Detect: PeReader FAIL, AsmResolver Mapped OK

PE Layout UNKNWOWNsuspect

Memoryhuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential