92f3067f8f1d94cca862777828272ee3

AutoIt Compiled Script

MD5: 92f3067f8f1d94cca862777828272ee3

Size: 1.58 MB

application/x-dosexec

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

MD5	92f3067f8f1d94cca862777828272ee3
Sha1	f23760c0cc0b6eb343f4c9f658e87476178a7fe0
Sha256	91702decfaf0d0501941ec71e9d9db522fb293aab485a766a5a9f0ccde3d983d
Sha384	ddd0a9975593326b8b88b1974e6e0182394345f5708c2823bcdd793d3de2afed6e067b65b784774e9ff45b6db532241a
Sha512	5327c33f598fc91588e39af19eace1e32ecb1246e78def759d6316dafbb3e3cb4a3dd0c6db8c2cda259d1ef84651887c9f4d7e13277f8e3319eb951e66027548
SSDeep	24576:JtlcxTOdR05ODAtuiSEWzH0aliXHyp6jq+NtziXix7SGP1nQTGTvvNZo4814yh/O:HlGTC05JJSuakSw/Ntx7SmnpvFZxw/Y
TLSH	1175232623D848ABE4F6433556F2A5A713B1BC93176247DF23985C4E2F636D5B0B8343

PeID

Microsoft Visual C++ 8.0 (DLL)

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 7 STICH kept: 1secondary ignored: 6

bin 4img 2

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:exe>pe:autoit>pe:autoit

Shape pe:exe>pe:autoit>pe:autoit

malicious 3 nodes

Name	Value
Info	PE Detect: PeReader OK (file layout)
Info	PDB Path: wextract.pdb

PE Layout UNKNWOWNsuspect

Memoryhuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential

No malware configuration was found at this point.

PE Layout UNKNWOWNsuspect

Memoryhuhuhuhuhuhuhuhuhuhuhu

92f3067f8f1d94cca862777828272ee3 › Resources › RT_RCDATA › ID:0000 › ID:1033 › AutoIt3.exe

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential

You must be signed in to view YARA rules.