Malicious
Malicious

AutoIt Compiled Script
MD5: 9cdfcec2998ce07ba61527d653934e73
Size: 1.56 MB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 9cdfcec2998ce07ba61527d653934e73
Sha1 d21b50d7f00859634fc520a966a3b9df4084d1f7
Sha256 02f7b0a5e5d5f342ac04d36ed2e79629714ed3a2d7fad472e60745ff9956db4d
Sha384 e0dced309db357ec4f0c5c9b5894c001b8743a627f30d7d46523b60bf869fa8a268f553c0b5847bf9e6101db9115c2e1
Sha512 038164b63bbc28e88a4ff3769038e25c4d5223d466671effcc41598b9fcb43697038ea70a5c677a188d026589d999bcdf7b1e3de0870cfcd679e19e4d97dd1bb
SSDeep 24576:c5EmXFtKaL4/oFe5T9yyXYfP1ijXdaC/oIAIssqQpHttJGUJygT9:cPVt/LZeJbInQRaC/nTpqQpHtqUJy
TLSH 0A75CF4373819066FFAB92734B66F61256BD6D260133E51F12983979BEB01B2023F763
PeID
Microsoft Visual C++ 6.0 DLL (Debug)Microsoft Visual C++ 8Microsoft Visual C++ 8Microsoft Visual C++ v6.0 DLLVC8 -> Microsoft Corporation
aut8472.tmp.tok
Malicious
[Cleaned].au3
Malicious
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:2057
ID:0002
ID:2057
RT_STRING
ID:0007
ID:2057
ID:0008
ID:2057
ID:0009
ID:2057
ID:000A
ID:2057
ID:000B
ID:2057
ID:000C
ID:2057
ID:0139
ID:2057
RT_RCDATA
ID:0000
RT_GROUP_CURSOR4
ID:0063
ID:2057
ID:00A9
ID:2057
RT_VERSION
ID:0001
ID:2057
RT_MANIFEST
ID:0001
ID:2057
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
PDB Path: t$di
aut8472.tmp.tok
Malicious
[Cleaned].au3
Malicious
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:2057
ID:0002
ID:2057
RT_STRING
ID:0007
ID:2057
ID:0008
ID:2057
ID:0009
ID:2057
ID:000A
ID:2057
ID:000B
ID:2057
ID:000C
ID:2057
ID:0139
ID:2057
RT_RCDATA
ID:0000
RT_GROUP_CURSOR4
ID:0063
ID:2057
ID:00A9
ID:2057
RT_VERSION
ID:0001
ID:2057
RT_MANIFEST
ID:0001
ID:2057
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙