Deep Malware Analysis of ad9429e373622b486589a4129697d2f1 | md5: ad9429e373622b486589a4129697d2f1 | Executable | PE (Portable Executable) | PE Memory-Mapped (Dump) | AutoIt | CAB:COMPRESSION:LZX | Suspect | Decompiled

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	ad9429e373622b486589a4129697d2f1
Sha1	4083d0bb11b12af8b725abdf9f64f2051fc05bad
Sha256	6a91f2274edb5396ca708a0ee14689cf3ff44a8c19b392ad192e4bb0dffa0a80
Sha384	4bb96dbeba5bc38a3a7c83124ba0dbe62252db43a0eff19adac60e028af8fdc0a69de0e97a223ea39837a744a8ff9ff0
Sha512	d59380bac56151d30a9b087542bfd19c131aea5d9c5b8117f7928fbed1bbb5f8d2c6cd1ee7c3f48f525c8d6ad22553f59f6b8d9491664d85aa69de4ecd745701
SSDeep	24576:cBhUSx4QP3ZFb72XPwIA1gqf/F+fgXadJ:cBhza4ZFb7anA1gyggXeJ
TLSH	3215120282E98437E86CA77058F70EDB0630BD126D7967A757C06D972CB3A84E97173E

PeID

Microsoft Visual C++ 8

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1

bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:exe>pe:autoit>pe:autoit

Shape pe:exe>pe:autoit>pe:autoit

malicious 3 nodes

Name	Value
Info	PE Detect: PeReader FAIL, AsmResolver Mapped OK

PE Layout UNKNWOWNsuspect

Memoryhuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential