852d9a34235fc2c168be654268ff28c3

AutoIt Compiled Script

MD5: 852d9a34235fc2c168be654268ff28c3

Size: 2.21 MB

application/x-dosexec

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

MD5	852d9a34235fc2c168be654268ff28c3
Sha1	de89589ca983276dc41a74c7e8ba919c6a6ecf62
Sha256	7d09e2f4a9ee25024a1498f833448d095787e6faf8908ed9ed3fe536032c0de6
Sha384	80b7648b9ed93215d0d162ce52d98535d5632e6cdc4555591e07248d78d5480256054f7270bd03d4cd9682138a3616bf
Sha512	410e11e020b93c69d3c75451a60f35d95ea483714a211d937c8aeb74d7284fcbcb26d3780dc0a3d569b708cefa7b09a3db228e4c99589c50209bf3e6b2879be7
SSDeep	49152:AIyWYyaWqk37e+vHdDoupcwK0Kmb8w8tjEnQzPeq:AIWpAv+nwxid7e
TLSH	F0A5330A96F88852D9D40B7104ED77161A32B9639B3443CB4A88CC5FBE2B8D5D6317BF

PeID

Microsoft Visual C++ 8

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 7 STICH kept: 1secondary ignored: 6

bin 4img 2

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

1 / 1

Path pe:exe>pe:autoit>pe:autoit

Shape pe:exe>pe:autoit>pe:autoit

malicious 3 nodes

Name	Value
Info	PE Detect: PeReader OK (file layout)
Info	PDB Path: wextract.pdb

PE Layout UNKNWOWNsuspect

Memoryhuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential

No malware configuration was found at this point.

PE Layout UNKNWOWNsuspect

Memoryhuhuhuhuhuhuhuhuhuhuhu

852d9a34235fc2c168be654268ff28c3 › Resources › RT_RCDATA › ID:0000 › ID:1033 › AutoIt3.exe

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential

You must be signed in to view YARA rules.