Sign up free
Malicious
Malicious

6802aa7ada7f75ddf48bc0287a62cab7

Share on LinkedIn
Print
AutoIt Compiled Script
MD5: 6802aa7ada7f75ddf48bc0287a62cab7
Size: 1.21 MB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan

This sample is a 1.2 MB AutoIt Compiled Script. Malva.RE parsed it statically and found no known malware family, configuration or malicious signature. Static analysis extracted 28 embedded or derived files. It matches 6 YARA rules. Static analysis cannot prove a file is harmless: an unknown or heavily packed threat can go undetected. The file was parsed and decompiled, never executed.

SHA256
ccb84b327afb07bccbe3367be35abe53ccb8f0ad9a815bb098e30029387def10
MD5
6802aa7ada7f75ddf48bc0287a62cab7
Verdict
No known threat found
File type
AutoIt Compiled Script · 1.2 MB

Cite this report: https://app.malva.re/sha256/ccb84b327afb07bccbe3367be35abe53ccb8f0ad9a815bb098e30029387def10

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
AutoIt Compiled Script
Size
1.21 MB · 1,213,952 B
First seen
2026-01-26 02:30 · 9 months ago
Last seen
2026-01-26 02:30 · 9 months ago
Last analysis
2026-01-26 02:31 · 9 months ago
Hashes
MD5 6802aa7ada7f75ddf48bc0287a62cab7 Sha1 7e890b47075b606ead4d1352ed90c50e795ac4be Sha256 ccb84b327afb07bccbe3367be35abe53ccb8f0ad9a815bb098e30029387def10 Sha384 1a1b0b4014f29938c65435daee785de3ffc6b70ad081a79786dfce589c5e7434063d68979f9a55b2486e0f709af5062e Sha512 f68d9f18a4b0583f6e43886ae1eb7ef34c6630e587a989b8975da2d5a3b978b8935be5597cfe52cc139b2020e052c40f323ec2022eb64cef9e0b9a5145c0993d SSDeep 24576:+qDEvCTbMWu7rQYlBQcBiT6rprG8aAe7V+U5em2K2hrfD:+TvC/MTQYxsWR7aAMRY5 TLSH EC45C0027381C062FFAB92734B5AF6115BBC7A260123E61F13981DB9BD705B1563E7A3
Detection
PeID
Microsoft Visual C++ 6.0 DLL (Debug)Microsoft Visual C++ 8Microsoft Visual C++ 8Microsoft Visual C++ v6.0 DLLVC8 -> Microsoft Corporation

3 malicious · 29 files
A3X6802aa7ada7f75ddf48bc0287a62cab7
Structure
A3Xaut3BF3.tmp.tok
A3X[Cleaned].au3

Name Value
Info
PDB Path: t$di

An error has occurred. This application may no longer respond until reloaded. Reload 🗙