Deep Malware Analysis of ac3ec31b0b2c0f5e017f662ba7e36a67 | md5: ac3ec31b0b2c0f5e017f662ba7e36a67 | Executable | PE (Portable Executable) | PE Memory-Mapped (Dump)

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	ac3ec31b0b2c0f5e017f662ba7e36a67
Sha1	2df79edb7145ec71f3634c0dc12b8a29099aa9ad
Sha256	e8cfa9a30a3a91265ef0c1854ccf055befacdb8370aebc166f111cc4f40c01ff
Sha384	eae0d364fba4003081fa6a74fb16c952cddeab9f61c59ede2a53104860615da6eecd5d0ee55045162a4feed19c092f97
Sha512	ace56f0275d8433b2ea0dab5a6d36ad11b2f180a394e6520990c4d02a49ec1ade97327e32d9844aa7ea3229ae57d2e72b838d569c1d5af36c83fd36afba2c03d
SSDeep	12288:WVbLgPlumQhMbaIMu7L5NVErCA4z2g6rTcbckPU82900Ve7zw+K+DHeQYSUj:gbLgdlQhfdmMSirYbcMNgef0QeQ
TLSH	F236225A766C91FCC11A6274A4734926E6B33CAA227D970F8F948B620C13750FF74B4B

PeID

Microsoft Visual C++ 6.0Microsoft Visual C++ 6.0 DLLMicrosoft Visual C++ 6.0 DLL (Debug)Microsoft Visual C++ v6.0 DLLMicrosoft Visual C++ v6.0 DLLUPolyX 0.3 -> delikon

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1

bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:dll>pe:dll

Shape pe:dll>pe:dll

2 nodes

Name	Value
Info	PE Detect: PeReader FAIL, AsmResolver Mapped OK
Info	Overlay extracted: Overlay_693e9af8.bin (3 bytes)
Info	Remap: Mapped -> FileLayout (RAM only) as [Rebuild from dump]_d2287245.exe

PE Layout UNKNWOWNsuspect

Memoryhuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential