1a92ab29917b5940f9108d54fedc8ecb

AutoIt Compiled Script

MD5: 1a92ab29917b5940f9108d54fedc8ecb

Size: 5.92 MB

application/x-dosexec

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

MD5	1a92ab29917b5940f9108d54fedc8ecb
Sha1	524f20553e0dfe6b24579c761de50b07efe00915
Sha256	ee1f035f485e2c215369c123e190185e8a4a6f34c7562e96ef058ab9e2f2a10f
Sha384	ba7dee742eb5b791cac0f22e32628f8de100e742b2c2d48c3a061700114881cef844db435e1d6c52c704e91558a0d9f5
Sha512	94d9245060d3429315067fa5cd327c98d6fa188afeea600c8a42aa8a87da8ca03fea6d4628aa240a869a076d8433280663c5d23938213c19faff68417bc9e25a
SSDeep	98304:h0AP+IPjin74JFLRLo4dGPrWAUX5GjMFPbM/kdUPY8nGmkoIyCh:WAP+0jinaFLsSUMBMMdkJGmqy
TLSH	875633C3B951C4B1F9364E316877899A973A7C7B5DA9228B2040FEC139B127285F3B17

PeID

Microsoft Visual C++ 8.0 (DLL)

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 6 STICH kept: 1secondary ignored: 5

bin 4img 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:exe>pe:autoit>pe:autoit

Shape pe:exe>pe:autoit>pe:autoit

malicious 3 nodes

Name	Value
Info	PE Detect: PeReader OK (file layout)
Info	PDB Path: wextract.pdb

PE Layout UNKNWOWNsuspect

Memoryhuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential

No malware configuration was found at this point.

PE Layout UNKNWOWNsuspect

Memoryhuhuhuhuhuhuhuhuhuhuhu

1a92ab29917b5940f9108d54fedc8ecb › Resources › RT_RCDATA › ID:0000 › ID:1033 › AutoIt3.exe

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential

You must be signed in to view YARA rules.