55086caf39129a111ae656fed7976469

AutoIt Compiled Script

MD5: 55086caf39129a111ae656fed7976469

Size: 1.62 MB

application/x-dosexec

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

MD5	55086caf39129a111ae656fed7976469
Sha1	b88ab0fbf814ed90523ae152caff3046f5863e66
Sha256	9b4fc704f7a53929ab614c2fc68bb63b85f901043375914a4e92cd0a8d32d643
Sha384	1c567a178c73b9cab65241007acfc594eb7a9bb0ce271690938016041bfce15c2f5992e600f12b41626a54334ab452a6
Sha512	01c4f0dc257d11a3b3fdce50df2c1e0d26e48c0e902b7872e8bb4a93179cb86ab5da4fd6e385cf582e42b2f6453afb12c1dc740ef8133f90cbde00661e3690e1
SSDeep	24576:QnTY4LWrzJEdOPl3EuMaPn8C5FAAojYunEPAsc1g1pVhUCBglF1VSk0qEIwdC:ckPrM8ujswg1pVhQTVF0qf
TLSH	06752382E6E50437FDF3A7B440B5054BB27631886B39C2EB365085893E632C9BD7539B

PeID

Microsoft Visual C++ 8.0 (DLL)

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 7 STICH kept: 1secondary ignored: 6

bin 5img 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:exe>pe:autoit>pe:autoit

Shape pe:exe>pe:autoit>pe:autoit

malicious 3 nodes

Name	Value
Info	PE Detect: PeReader OK (file layout)
Info	Authenticode present at 0x188A00 size 11264 bytes
Info	PDB Path: wextract.pdb

PE Layout UNKNWOWNsuspect

Memoryhuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential

No malware configuration was found at this point.

PE Layout UNKNWOWNsuspect

Memoryhuhuhuhuhuhuhuhuhuhuhu

55086caf39129a111ae656fed7976469 › Resources › RT_RCDATA › ID:0000 › ID:1033 › AutoIt3.exe

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential

You must be signed in to view YARA rules.