Deep Malware Analysis of b21e9e3b31241e1c455f8538c6ddafd8 | md5: b21e9e3b31241e1c455f8538c6ddafd8 | Executable | PE (Portable Executable) | AutoIt | CAB:COMPRESSION:LZX | PE File Layout | Win 64 Exe | x64 | PDB Path | Suspect | Decompiled | PE Memory-Mapped (Dump)

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	b21e9e3b31241e1c455f8538c6ddafd8
Sha1	95738d07b325fe5c8af2d63e3b748ecd9673e185
Sha256	d75c3087b547c5273d8c296de8c730f58b921b3d85a0edf8f5c9087fdefd9b2f
Sha384	25a70e9bff569ec50029d6494f6fb9afaa49bdd71ad72b5744a67e63b183f2455c5087428cc20c119ca8b9d5a808fa50
Sha512	550b426d3dded48c07a4cd4b865c579b5912959ca4acb8a6782cf171bc4009aad09a50d4ce6b310c1006faad2ea23d4f43986b02d9e7ca15b631b233ec9253dc
SSDeep	49152:YTn2muGFcfY6wdSy4HuudWKCtUzZbpun3UtPxQ0VLfGe:YTn2msA6w0HuudviWpVt91fGe
TLSH	1136235393E14825E8AB7B7944F78A2B6331BC935F79C68F62D0B4851E327C5A236302

PeID

Microsoft Visual C++ 8.0 (DLL)

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 7 STICH kept: 1secondary ignored: 6

bin 4img 2

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:exe>pe:autoit>pe:autoit

Shape pe:exe>pe:autoit>pe:autoit

malicious 3 nodes

Name	Value
Info	PE Detect: PeReader OK (file layout)
Info	PDB Path: wextract.pdb

PE Layout UNKNWOWNsuspect

Memoryhuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential