Suspect
48418be99b4e4d56c04a689eb8b4d8b3
AutoIt Compiled Script
MD5: 48418be99b4e4d56c04a689eb8b4d8b3
Size: 2.09 MB
application/x-dosexec
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
| MD5 | 48418be99b4e4d56c04a689eb8b4d8b3 |
| Sha1 | 291c50d9db8f37d151a8acdfea5d0b3c77b54acb |
| Sha256 | c9f156cb719e0a71e4087ae26b108ad3745d14ed1d06314596acb929d8bc8a5f |
| Sha384 | 9d424cd81540185f576e0103439f0dd755e75aa28d5325dbbb54e0cc20ccbc47f9aa87ea5d10cd6abfd10cb70cf83fe5 |
| Sha512 | 80a9e738e86e10b7f3f5259844a4c4bfb9fd7f0ca8e4a62e8309bc89d12143f9a1ce9dca6e63de0199b38296d9d79a3299468a7c19350d950bc21a2f5212f377 |
| SSDeep | 49152:2GIICojn9rRViKSJDiLcwHI94MNp7PVHaBc4CaRiDYhhp66/+/XZY:2INnYDi304sLVRsiDuhp2 |
| TLSH | 99A5232016C6945FF7B127B9A8F9C14772FD7D0C0A7A0EEF2E55728A4B1638548FA306 |
PeID
Microsoft Visual C++ 8.0 (DLL)
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
Structural branches: 6
STICH kept: 2secondary ignored: 4
bin
3img
1Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:exe>pe:rsrc>pe:autoit
Shape
pe:exe>pe:rsrc>pe:autoit
3 nodes
Path
pe:exe>pe:autoit
Shape
pe:exe>pe:autoit
2 nodes
| Name | Value |
|---|---|
| Info | PE Detect: PeReader OK (file layout) |
| Info | PDB Path: wextract.pdb |
No malware configuration was found at this point.
You must be signed in to view YARA rules.