Deep Malware Analysis of 852d9a34235fc2c168be654268ff28c3 | md5: 852d9a34235fc2c168be654268ff28c3 | Executable | PE (Portable Executable) | PE File Layout | Win 32 Exe | x86 | PDB Path | AutoIt | CAB:COMPRESSION:LZX | Suspect | Decompiled | PE Memory-Mapped (Dump)

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	852d9a34235fc2c168be654268ff28c3
Sha1	de89589ca983276dc41a74c7e8ba919c6a6ecf62
Sha256	7d09e2f4a9ee25024a1498f833448d095787e6faf8908ed9ed3fe536032c0de6
Sha384	80b7648b9ed93215d0d162ce52d98535d5632e6cdc4555591e07248d78d5480256054f7270bd03d4cd9682138a3616bf
Sha512	410e11e020b93c69d3c75451a60f35d95ea483714a211d937c8aeb74d7284fcbcb26d3780dc0a3d569b708cefa7b09a3db228e4c99589c50209bf3e6b2879be7
SSDeep	49152:AIyWYyaWqk37e+vHdDoupcwK0Kmb8w8tjEnQzPeq:AIWpAv+nwxid7e
TLSH	F0A5330A96F88852D9D40B7104ED77161A32B9639B3443CB4A88CC5FBE2B8D5D6317BF

PeID

Microsoft Visual C++ 8

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 7 STICH kept: 1secondary ignored: 6

bin 4img 2

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

1 / 1

Path pe:exe>pe:autoit>pe:autoit

Shape pe:exe>pe:autoit>pe:autoit

malicious 3 nodes

Name	Value
Info	PE Detect: PeReader OK (file layout)
Info	PDB Path: wextract.pdb

PE Layout UNKNWOWNsuspect

Memoryhuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential