Malicious
6802aa7ada7f75ddf48bc0287a62cab7
AutoIt Compiled Script
MD5: 6802aa7ada7f75ddf48bc0287a62cab7
Size: 1.21 MB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan
This sample is a 1.2 MB AutoIt Compiled Script classified as malicious by Malva.RE. Static analysis extracted 28 embedded or derived files. It matches 6 YARA rules. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- ccb84b327afb07bccbe3367be35abe53ccb8f0ad9a815bb098e30029387def10
- MD5
- 6802aa7ada7f75ddf48bc0287a62cab7
- Verdict
- Malicious
- File type
- AutoIt Compiled Script · 1.2 MB
Cite this report: https://app.malva.re/sha256/ccb84b327afb07bccbe3367be35abe53ccb8f0ad9a815bb098e30029387def10
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
AutoIt Compiled Script
Size
1.21 MB · 1,213,952 B
Hashes
MD5
6802aa7ada7f75ddf48bc0287a62cab7
Sha1
7e890b47075b606ead4d1352ed90c50e795ac4be
Sha256
ccb84b327afb07bccbe3367be35abe53ccb8f0ad9a815bb098e30029387def10
Sha384
1a1b0b4014f29938c65435daee785de3ffc6b70ad081a79786dfce589c5e7434063d68979f9a55b2486e0f709af5062e
Sha512
f68d9f18a4b0583f6e43886ae1eb7ef34c6630e587a989b8975da2d5a3b978b8935be5597cfe52cc139b2020e052c40f323ec2022eb64cef9e0b9a5145c0993d
SSDeep
24576:+qDEvCTbMWu7rQYlBQcBiT6rprG8aAe7V+U5em2K2hrfD:+TvC/MTQYxsWR7aAMRY5
TLSH
EC45C0027381C062FFAB92734B5AF6115BBC7A260123E61F13981DB9BD705B1563E7A3
Detection
PeID
Microsoft Visual C++ 6.0 DLL (Debug)Microsoft Visual C++ 8Microsoft Visual C++ 8Microsoft Visual C++ v6.0 DLLVC8 -> Microsoft Corporation
3 malicious · 29 files
A3X6802aa7ada7f75ddf48bc0287a62cab7
Structure
A3Xaut3BF3.tmp.tok
A3X[Cleaned].au3
BINResources
BINRT_ICON
BINID:0001
BINID:2057
BINID:0002
BINID:2057
BINID:0003
BINID:2057
BINID:0004
BINID:2057
BINID:0005
BINID:2057
BINID:0006
BINID:2057
BINID:0007
BINID:2057
BINID:0008
BINID:2057
BINID:0009
BINID:2057
BINID:000A
BINID:2057
BINID:000B
BINID:2057
BINRT_MENU
BINID:00A6
BINID:2057
BINRT_STRING
BINID:0007
BINID:2057
BINID:0008
BINID:2057
BINID:0009
BINID:2057
BINID:000A
BINID:2057
BINID:000B
BINID:2057
BINID:000C
BINID:2057
BINID:0139
BINID:2057
BINRT_RCDATA
BINID:0000
A3XID:0
BINRT_GROUP_CURSOR4
BINID:0063
BINID:2057
BINID:00A2
BINID:2057
BINID:00A4
BINID:2057
BINID:00A9
BINID:2057
BINRT_VERSION
BINID:0001
BINID:2057
BINRT_MANIFEST
BINID:0001
BINID:2057
| Name | Value |
|---|---|
| Info | PDB Path: t$di |
3 malicious · 29 files
A3X6802aa7ada7f75ddf48bc0287a62cab7
Structure
A3Xaut3BF3.tmp.tok
A3X[Cleaned].au3
BINResources
No malware configuration was found at this point.
Sign in or create a free account to view the matching YARA rules.
Create a free account