9d30b8f55df5cd82604271e8ee6f727d

AutoIt Compiled Script

MD5: 9d30b8f55df5cd82604271e8ee6f727d

Size: 8.39 MB

application/x-dosexec

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

MD5	9d30b8f55df5cd82604271e8ee6f727d
Sha1	b6406eecefa66d9fbfbe721d1bb3c38c1ddbc91a
Sha256	644667c869b560afdd523a5c2dae1e4a6753481f7b155df378cd59377e4b2b55
Sha384	4d4cd217475997b13801bf24f9368ab9af9e8937cbb1b0d2a9674a8eb0a5ceaf97b750d9ef8796dffb3352ac8357431d
Sha512	42ada1bc05202182e2ea863f3ab7f584faa14d7d4d8d831c8f0d9d3592876850992590d5aa29ca5a399a9e4bc775d8f114df47a6d24c6e3b7b29cd945c1c54b8
SSDeep	24576:xd+DXaYg2jEgC1ziUSOY4e+VtX+rAmwZB0Z+wJlozzu:SDNEg+ziUS4e+V4AmOB0Z+
TLSH	6486231A53E480B1E460DB789DA2819B5931BC616F79A7EF3228774F2F33AC4A174317

PeID

Microsoft Visual C++ 8.0 (DLL)

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 7 STICH kept: 1secondary ignored: 6

bin 4img 2

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:exe>pe:autoit>pe:autoit

Shape pe:exe>pe:autoit>pe:autoit

malicious 3 nodes

Name	Value
Info	PE Detect: PeReader OK (file layout)
Info	PDB Path: wextract.pdb

PE Layout UNKNWOWNsuspect

Memoryhuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential

No malware configuration was found at this point.

PE Layout UNKNWOWNsuspect

Memoryhuhuhuhuhuhuhuhuhuhuhu

9d30b8f55df5cd82604271e8ee6f727d › Resources › RT_RCDATA › ID:0000 › ID:1033 › AutoIt3.exe

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential

You must be signed in to view YARA rules.