Deep Malware Analysis of a563ff5a153b001223ff8d93d68405c9 | md5: a563ff5a153b001223ff8d93d68405c9 | Executable | PE (Portable Executable) | PE Memory-Mapped (Dump)

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	a563ff5a153b001223ff8d93d68405c9
Sha1	a3b4e81b5da8cf8a500cb87939e2be9bff352145
Sha256	6b1f9dee6182e98eabff20baa433fced12a7f584e4973eb7b020f6a0c297fcec
Sha384	ce87e0a75a230fa6e684e1fbb4911def6c28f52d25de008dd9790163c3d64ab7ad39c8084e3711c77f14cd5dedc8af43
Sha512	1a51b91fd53fe54bfc5d7b7a236847404369c408fea384438442970923f13f3851c1cb53d3028bda3da6d4f7f8647146f7538e988d42b65ffb63b853e4f5f7a4
SSDeep	98304:DXDqPoBhz1aRxcSUg6SAEdhvxWa9P593:DXDqPe1CxcuZAEUadz
TLSH	2B363359322CD5BCE046197444B3CE29E3737C5167BE9A0F87504EA73E13B9BAB90B12

PeID

Microsoft Visual C++ 6.0 DLL (Debug)Microsoft Visual C++ v6.0 DLLMicrosoft v12.00 64bit C++ DLL - sign ASL ( 64 bit ) UPolyX 0.3 -> delikon

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:dll

Shape pe:dll

1 nodes

Name	Value
Info	PE Detect: PeReader FAIL, AsmResolver Mapped OK

PE Layout UNKNWOWNsuspect

Memoryhuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential