Deep Malware Analysis of 97b67986332d3ed13fb982f0ac8d3d0f | md5: 97b67986332d3ed13fb982f0ac8d3d0f | Executable | PE (Portable Executable) | CAB:COMPRESSION:LZX | PE File Layout | Win 64 Exe | x64 | PDB Path | AutoIt

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	97b67986332d3ed13fb982f0ac8d3d0f
Sha1	6f801c7f28a562c26a35bd9e365f16361a4da403
Sha256	6245b55a44e72245eca0ddd75fb6295656df911879c54890f3b9382fdfd22913
Sha384	fd3d50e7503461768c8fade364cf026b85f238acdd25503ebc70d7d691b5f9026dd818cf8d7621f176dc167b2a34081c
Sha512	554a8ca2d8507904d4bd844392e86633317041dbb3e3a29b722e4630e8208b5a2a3586286f8615d80702cb1f67a68f3476dde8e6e7210c02f6a99805e181cb79
SSDeep	24576:mH893F/1Dq/5ys4UuI5eJgSufqJFFVUc94m8U1yQhZj06++:J93neBysXenJIiyQhK6
TLSH	0A25221253E040AEE0F9973449F285A74B327C826B7D9A8F3691B56E1F32AC5F435327

PeID

Microsoft Visual C++ 8.0 (DLL)

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 7 STICH kept: 1secondary ignored: 6

bin 4img 2

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:exe>pe:autoit

Shape pe:exe>pe:autoit

2 nodes

Name	Value
Info	PE Detect: PeReader OK (file layout)
Info	PDB Path: wextract.pdb