3e0dcc0201c03ede8f4aa0ddbf9b5c85
This sample is a 13 MB AutoIt Compiled Script classified as malicious by Malva.RE. Static analysis extracted 15 embedded or derived files. It matches 3 YARA rules. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 53b9090542e879499c05813aa62baf311c1ad1cfe7f9f06805e2a7cd3a1211b9
- MD5
- 3e0dcc0201c03ede8f4aa0ddbf9b5c85
- Verdict
- Malicious
- File type
- AutoIt Compiled Script · 13 MB
Cite this report: https://app.malva.re/sha256/53b9090542e879499c05813aa62baf311c1ad1cfe7f9f06805e2a7cd3a1211b9
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
bin
3Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.
pe:dll>pe:autoit
pe:dll>pe:autoit
| Name | Value |
|---|---|
| Info | Authenticode present at 0x65600 size 13214240 bytes |
| Info | PDB Path: C:\Users\Jason A. Donenfeld\Projects\wintun\Release\amd64\wintun.pdb |