Malicious
Malicious

5621b94ee22762740d162c91ea1991f4

AutoIt Compiled Script
MD5: 5621b94ee22762740d162c91ea1991f4
Size: 1.18 MB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 5621b94ee22762740d162c91ea1991f4
Sha1 e64928277c79eebec35154d541e152d9513600ab
Sha256 cc3ca5fb64666cfb1860c997333b0cc43f10fcc71a4a4840e47815fd659b907d
Sha384 1ddf5014f071c9e0c3269a8c5f3309b2862d631ec3b06486fbc27c3a54581bd19fb16354a4bfe8a7f3abdb0091bfbab5
Sha512 89778d95df75e7c6061f128c4e2174ee622d3f666196e2726e962fac5acfb0ba934d4e5a352d217b374211d11959304d2155aca1b9aaee1b91714c902d5bf439
SSDeep 24576:Qtb20pkaCqT5TBWgNjVYFmfJvBJp1xiV6A:ZVg5tjVYF+JvBbu5
TLSH C345CF2273DE8361C7726273BA56B701AEBF7C2506B5F46B2FD4093DE820162521E673
PeID
Microsoft Visual C++ 6.0 DLL (Debug)Microsoft Visual C++ 7.0 - 8.0Microsoft Visual C++ 8Microsoft Visual C++ 8Microsoft Visual C++ v6.0 DLLVC8 -> Microsoft Corporation
autD9FB.tmp.tok
Malicious
[Cleaned].au3
Malicious
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:2057
ID:0002
ID:2057
ID:0003
ID:2057
ID:0004
ID:2057
ID:0005
ID:2057
ID:0006
ID:2057
ID:0007
ID:2057
ID:0008
ID:2057
ID:0009
ID:2057
RT_STRING
ID:0007
ID:2057
ID:0008
ID:2057
ID:0009
ID:2057
ID:000A
ID:2057
ID:000B
ID:2057
ID:000C
ID:2057
ID:0139
ID:2057
RT_RCDATA
ID:0000
RT_GROUP_CURSOR4
ID:0063
ID:2057
ID:00A9
ID:2057
RT_VERSION
ID:0001
ID:2057
RT_MANIFEST
ID:0001
ID:2057
Name Value
Info
PE Detect: PeReader OK (file layout)
autD9FB.tmp.tok
Malicious
[Cleaned].au3
Malicious
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:2057
ID:0002
ID:2057
ID:0003
ID:2057
ID:0004
ID:2057
ID:0005
ID:2057
ID:0006
ID:2057
ID:0007
ID:2057
ID:0008
ID:2057
ID:0009
ID:2057
RT_STRING
ID:0007
ID:2057
ID:0008
ID:2057
ID:0009
ID:2057
ID:000A
ID:2057
ID:000B
ID:2057
ID:000C
ID:2057
ID:0139
ID:2057
RT_RCDATA
ID:0000
RT_GROUP_CURSOR4
ID:0063
ID:2057
ID:00A9
ID:2057
RT_VERSION
ID:0001
ID:2057
RT_MANIFEST
ID:0001
ID:2057
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙