Deep Malware Analysis of a13552f4d6924a905734bcd794da46fe | md5: a13552f4d6924a905734bcd794da46fe | Executable | PE (Portable Executable) | PE File Layout | Win 64 Exe | x64 | PDB Path

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	a13552f4d6924a905734bcd794da46fe
Sha1	2804154770ba9b1757f677565195aaa0e39fff7d
Sha256	04ef5c970c0f02f7644930b79c63fd915a68e0b996fdb8cd481a6ef1395a57b5
Sha384	26333cf7598734a108da708ff8fc186c3d3e7dad9251c8d5cf51a8d1449bc204e746ebde0751b0fcae02593c583fac2a
Sha512	9657ec6c02dd90aed76822b4c48c8cfacac894185e215b089b9d4996bfae916566717951bbe0f4babdb67a054fc85977c7abd5f7eb901d538d983d4bbc992038
SSDeep	196608:XdAAEmvtbW897G6x7eovq5XMP6PzFc3W1/zMkKFcaPuxVHsoq1bRjMFQ7:aFA1bdq1B7nrhKmaPWHsoq1bpi8
TLSH	6BC6338423D10990F89FB23D69D1966B83E174311B21C6DB1BF08DA52E632F6EF35B91

PeID

Microsoft Visual C++ 8.0Microsoft Visual C++ 8.0 (DLL)Microsoft Visual C++ v6.0 DLLUPolyX 0.3 -> delikon

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 3 STICH kept: 1secondary ignored: 2

bin 1img 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:exe>scr:vbs

Shape pe:exe>scr:vbs

2 nodes

Name	Value
Info	PE Detect: PeReader OK (file layout)
Info	Overlay extracted: Overlay_bb924d85.bin (12033685 bytes)
Info	PDB Path: t$mn