Malicious
a7812d5e9cec1f28918b8b75b82f3c5f
AutoIt Compiled Script
MD5: a7812d5e9cec1f28918b8b75b82f3c5f
Size: 1.48 MB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
| MD5 | a7812d5e9cec1f28918b8b75b82f3c5f |
| Sha1 | 9904674ffb1ec1accc8e0cadfd53d74bd758a12c |
| Sha256 | ceb55891d866b719c8ef43b26704d3114fe19c94c71f091a7654be21abc32355 |
| Sha384 | af6e343d51ba4fea20b94371ce695eff810fe8f81f34396f11e18a3e4fa2814966878023b16df6a04cafb3f857e24526 |
| Sha512 | 42c86898072e6b7fabcb12bc6cec31e0ba0655a51ea9969ceaf7db93edc476306debd94b9d7d6ee8e0515650609312590981dcdf7e85b1e8266f5f6c2536c8a7 |
| SSDeep | 24576:dFp5lA/hikGzaIs3mS7dB1d/MfPgri9uoexNPWm0KgpQrPeWGpKgiCFFHe2XoJ6i:l5s4kGFs3mKXBMfCisoUAppQrPEKnSFt |
| TLSH | 9965234223E441E5CCBD073084F2A3534EA9BCE16B745BA733D6958E1E739C8993936B |
PeID
Microsoft Visual C++ 8Microsoft Visual C++ v6.0 DLLUPolyX 0.3 -> delikon
Malicious
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
Structural branches: 7
STICH kept: 2secondary ignored: 5
bin
3img
2Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
2 / 2
Path
pe:exe>pe:autoit>pe:autoit
Shape
pe:exe>pe:autoit>pe:autoit
malicious
3 nodes
Path
pe:exe>pe:rsrc>pe:autoit
Shape
pe:exe>pe:rsrc>pe:autoit
3 nodes
| Name | Value |
|---|---|
| Info | PE Detect: PeReader OK (file layout) |
| Info | PDB Path: wextract.pdb |
Malicious
No malware configuration was found at this point.
You must be signed in to view YARA rules.