Deep Malware Analysis of 8be48ea27f6cd6b2ec2ef3be4977322d | md5: 8be48ea27f6cd6b2ec2ef3be4977322d | Executable | PE (Portable Executable) | PE File Layout | Win 64 Exe | x64 | PDB Path | AutoIt | CAB:COMPRESSION:LZX | Suspect | Decompiled | PE Memory-Mapped (Dump)

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	8be48ea27f6cd6b2ec2ef3be4977322d
Sha1	ba655e73a1c08143324ffeaf56b6f6bea0a134e6
Sha256	105195dfdfbfdce7cf13f50d92bba761eba5bc22c31000109a67708f61474e12
Sha384	580df227df44c488572bfbd6e22bf946026aa094b07a23177cdc655790d29b40ddf0507929ec1209a49d7a3db9a4f951
Sha512	65d5a377296c9ad778f1cf9c44c20f0c608b958755c0c40b6258b6d15ddbb4c826c3bdc289dee7f377c17880348f767ffa2392ff62be454f2cd85d794005c29a
SSDeep	24576:qkNJxS5gYCIXRf7KZgP4wsYJDiAcmSkpHIS5ZNCP595QDK9Zl4QyWG8HSG0bVELF:qMPYn17KosYYItFNKyD4ZyQy/8HlL
TLSH	9095231296C109A2D4A2B73894F1819B5871BCB3473692DF35E57B8F3733FA06A76312

PeID

Microsoft Visual C++ 8.0 (DLL)

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 7 STICH kept: 1secondary ignored: 6

bin 4img 2

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:exe>pe:autoit>pe:autoit

Shape pe:exe>pe:autoit>pe:autoit

malicious 3 nodes

Name	Value
Info	PE Detect: PeReader OK (file layout)
Info	PDB Path: wextract.pdb

PE Layout UNKNWOWNsuspect

Memoryhuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential