Malicious
Malicious

ZIP Archive
MD5: 6508ed04f7530a68909525c5b70f2ae7
Size: 771.96 KB
application/zip
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 6508ed04f7530a68909525c5b70f2ae7
Sha1 0e64a27fbfa20126269b0c261d281585d1ddaf2a
Sha256 4bcedf21ae63f29a9aacc27cdcd1320259cd8a35c81befc0b960b95a93cf81e1
Sha384 46fcec7c07e2848c14d104850fbccc510351a1f56cf377de21addc937e3ff8f4f457d77d80efc33fe5684595233ff81f
Sha512 74ea769193fe60a8863ca59ec0aa6ee3076f64b25d753c0ea4cfb60d7a360a3f5b4a0867c43f12b9726e814fff33de4ad5aefaf8222298224a4069ba8c750ccb
SSDeep 12288:W+Za02e0L6q75phMQQz7eKRnBdBdHtUhiuDffN9sok+2M1sdqATEaC:W+ZEB7hPISKRnBdLt8Df19sFDM13D
TLSH 7EF423AE9FECA9AC9444E8D610AE84F7FD50374E5C88E3F9025A45035D8CBEF9BC1125
aut81D2.tmp.tok
Malicious
[Cleaned].au3
Malicious
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:2057
ID:0002
ID:2057
ID:0003
ID:2057
ID:0004
ID:2057
ID:0005
ID:2057
ID:0006
ID:2057
ID:0007
ID:2057
ID:0008
ID:2057
ID:0009
ID:2057
ID:000A
ID:2057
ID:000B
ID:2057
RT_MENU
ID:00A6
ID:2057
RT_STRING
ID:0007
ID:2057
ID:0008
ID:2057
ID:0009
ID:2057
ID:000A
ID:2057
ID:000B
ID:2057
ID:000C
ID:2057
ID:0139
ID:2057
RT_RCDATA
ID:0000
RT_GROUP_CURSOR4
ID:0063
ID:2057
ID:00A2
ID:2057
ID:00A4
ID:2057
ID:00A9
ID:2057
RT_VERSION
ID:0001
ID:2057
RT_MANIFEST
ID:0001
ID:2057
aut81D2.tmp.tok
Malicious
[Cleaned].au3
Malicious
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:2057
ID:0002
ID:2057
ID:0003
ID:2057
ID:0004
ID:2057
ID:0005
ID:2057
ID:0006
ID:2057
ID:0007
ID:2057
ID:0008
ID:2057
ID:0009
ID:2057
ID:000A
ID:2057
ID:000B
ID:2057
RT_MENU
ID:00A6
ID:2057
RT_STRING
ID:0007
ID:2057
ID:0008
ID:2057
ID:0009
ID:2057
ID:000A
ID:2057
ID:000B
ID:2057
ID:000C
ID:2057
ID:0139
ID:2057
RT_RCDATA
ID:0000
RT_GROUP_CURSOR4
ID:0063
ID:2057
ID:00A2
ID:2057
ID:00A4
ID:2057
ID:00A9
ID:2057
RT_VERSION
ID:0001
ID:2057
RT_MANIFEST
ID:0001
ID:2057
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙