55d059ddee230743be718bd56698228e

AutoIt Compiled Script

MD5: 55d059ddee230743be718bd56698228e

Size: 2.26 MB

application/x-dosexec

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

MD5	55d059ddee230743be718bd56698228e
Sha1	0853cb76e5cea4b7ed9ddc5ea2a3ec18356466b5
Sha256	97d632037760b0b33cf3342ed948d24ea6ae4461214bd3b7c9c385885588b399
Sha384	04b7f242a47ef0038beb99983990c9d55f0f4e117d8d84ba8a192436c7e3d17ca9fdf9ad6f860b5b4989653da27680c7
Sha512	a5bc2dcea6f0a1411928fb77d0de50aaa011bb47a3df296ac7180dbda7596bd4f4bcf2b803b2522c02f8fe437ed3e30c7e84361fa4f460b60aee2e729ffb6fe9
SSDeep	49152:wkTciYwWpAd9zNMAfXZnzXFIjdgvMK5Aj4b6yjCNprzyS3GRwAzlOzo4u:wkTDYFAXF/dV0HjkFjkprz0RTlOzo4
TLSH	ECA5331863FA02ABD4B0477DB0F300876832B9625BB483CF578546EE2FA22D57976747

PeID

Microsoft Visual C++ 8.0 (DLL)

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 7 STICH kept: 1secondary ignored: 6

bin 4img 2

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:exe>pe:autoit>pe:autoit

Shape pe:exe>pe:autoit>pe:autoit

malicious 3 nodes

Name	Value
Info	PE Detect: PeReader OK (file layout)
Info	PDB Path: wextract.pdb

PE Layout UNKNWOWNsuspect

Memoryhuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential

No malware configuration was found at this point.

PE Layout UNKNWOWNsuspect

Memoryhuhuhuhuhuhuhuhuhuhuhu

55d059ddee230743be718bd56698228e › Resources › RT_RCDATA › ID:0000 › ID:1033 › AutoIt3.exe

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential

You must be signed in to view YARA rules.