Malicious
a2ddb304051d7e6756ea938d9d5df0b8
AutoIt Compiled Script
MD5: a2ddb304051d7e6756ea938d9d5df0b8
Size: 2.03 MB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
| MD5 | a2ddb304051d7e6756ea938d9d5df0b8 |
| Sha1 | 57233e298d61da70cb0b9d72ded591a290007ea2 |
| Sha256 | acf1cd593222c9dc375d3979e2e46ff7b347120a1cc4654bf90f05dee90d20e5 |
| Sha384 | d7ffa2c2b25ea0229d1bc44d4b5308cc2d4563eb24031d40db5d559a1d8bf9c96cca64ba5ea47b8eba37fa9c5c06a2f5 |
| Sha512 | 933b6f27e00fcdc58bb35d2e69739b28f56ae153d52f91c37186f78706214d8f1a8be14f7b26f58f5ba8d74f2f6f9539acc981f58e26e865361aafb7b5354aa0 |
| SSDeep | 49152:KA+rGZuRYoJYx61ey78F7BPZWxH1C3V5OO4lRHt0zE:KDGIlY9xWxH1C3NuHCw |
| TLSH | 88952301C7C8E071F9B463725CED41432535FEA1EF34A1C773847AAE68A66C4B67236A |
PeID
Microsoft Visual C++ 8UPolyX 0.3 -> delikon
Malicious
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
Structural branches: 7
STICH kept: 2secondary ignored: 5
bin
3img
2Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
2 / 2
Path
pe:exe>pe:autoit>pe:autoit
Shape
pe:exe>pe:autoit>pe:autoit
malicious
3 nodes
Path
pe:exe>pe:rsrc>pe:autoit
Shape
pe:exe>pe:rsrc>pe:autoit
3 nodes
| Name | Value |
|---|---|
| Info | PE Detect: PeReader OK (file layout) |
| Info | PDB Path: wextract.pdb |
Malicious
No malware configuration was found at this point.
You must be signed in to view YARA rules.