Malicious
AutoIt Compiled Script
MD5: 6802aa7ada7f75ddf48bc0287a62cab7
Size: 1.21 MB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan
This sample is a 1.2 MB AutoIt Compiled Script. Malva.RE parsed it statically and found no known malware family, configuration or malicious signature. Static analysis extracted 28 embedded or derived files. It matches 6 YARA rules. Static analysis cannot prove a file is harmless: an unknown or heavily packed threat can go undetected. The file was parsed and decompiled, never executed.
- SHA256
- ccb84b327afb07bccbe3367be35abe53ccb8f0ad9a815bb098e30029387def10
- MD5
- 6802aa7ada7f75ddf48bc0287a62cab7
- Verdict
- No known threat found
- File type
- AutoIt Compiled Script · 1.2 MB
Cite this report: https://app.malva.re/sha256/ccb84b327afb07bccbe3367be35abe53ccb8f0ad9a815bb098e30029387def10
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
AutoIt Compiled Script
Size
1.21 MB · 1,213,952 B
First seen
2026-01-26 02:30 · 9 months ago
Last seen
2026-01-26 02:30 · 9 months ago
Last analysis
2026-01-26 02:31 · 9 months ago
Hashes
MD5
6802aa7ada7f75ddf48bc0287a62cab7
Sha1
7e890b47075b606ead4d1352ed90c50e795ac4be
Sha256
ccb84b327afb07bccbe3367be35abe53ccb8f0ad9a815bb098e30029387def10
Sha384
1a1b0b4014f29938c65435daee785de3ffc6b70ad081a79786dfce589c5e7434063d68979f9a55b2486e0f709af5062e
Sha512
f68d9f18a4b0583f6e43886ae1eb7ef34c6630e587a989b8975da2d5a3b978b8935be5597cfe52cc139b2020e052c40f323ec2022eb64cef9e0b9a5145c0993d
SSDeep
24576:+qDEvCTbMWu7rQYlBQcBiT6rprG8aAe7V+U5em2K2hrfD:+TvC/MTQYxsWR7aAMRY5
TLSH
EC45C0027381C062FFAB92734B5AF6115BBC7A260123E61F13981DB9BD705B1563E7A3
Detection
PeID
Microsoft Visual C++ 6.0 DLL (Debug)Microsoft Visual C++ 8Microsoft Visual C++ 8Microsoft Visual C++ v6.0 DLLVC8 -> Microsoft Corporation
3 malicious · 29 files
A3X6802aa7ada7f75ddf48bc0287a62cab7
Structure
A3Xaut3BF3.tmp.tok
A3X[Cleaned].au3
BINResources
| Name | Value |
|---|---|
| Info | PDB Path: t$di |