This sample is a 1.5 MB AutoIt Compiled Script identified by Malva.RE as Stealer Crypter (stealer loader). Static analysis extracted 77 embedded or derived files. It matches 20 YARA rules. Observed behaviours map to MITRE ATT&CK T1027, T1027.001, T1055, T1059.007 and T1140. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- ce27b29de2bc3fdf1d67620abb0c5502720312507fe3a0b237bad8070c86a450
- MD5
- add1f5728133a0bd26f16e14d16e6c39
- Verdict
- Malicious
- File type
- AutoIt Compiled Script · 1.5 MB
- Family
- Stealer Crypter
- Category
- Stealer Loader
Cite this report: https://app.malva.re/sha256/ce27b29de2bc3fdf1d67620abb0c5502720312507fe3a0b237bad8070c86a450
Related Stealer Crypter samples
- 904c4e2668168f89d0a2b49e205bbc4aee947e44c71871dd58ac401e2f191471 2026-10-27
- 1a461f91f62661bf469c00061c447c16f1137a097edbe651b295b6628e716363 2026-10-27
- 10a41c31e8477506d38a026c926bdbb0f26f398fc39bba406fbcb34b76fd5e5b 2026-10-27
- 095aaaa3cd9bb371eb912452ea29d6d12e907fcd4a7cdcefff1e44675c3bb4f6 2026-10-25
- bdc6af65b3c5c5d2519e0a2798f9445a522806ded006a3c8c0134e481dbb5692 2026-10-25
- fcccbce48b9c530257d49fe82897d975a52d0abece80c2f9dc0eb04ee43da05f 2026-10-24
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
pe:exe~T1027~T1027.001~T1055~T1140>pe:exe>pe:rsrc>bin
pe:exe>pe:exe>pe:rsrc>bin
pe:exe~T1027~T1027.001~T1055~T1140>pe:exe>pe:rsrc>img
pe:exe>pe:exe>pe:rsrc>img
| Name | Value |
|---|---|
| Attribution | |
| Info | Authenticode present at 0x189800 size 10272 bytes |
| Info | PDB Path: wextract.pdb |