c15e8c4aa190f2f7a0e2c58af492e9c0

AutoIt Compiled Script

MD5: c15e8c4aa190f2f7a0e2c58af492e9c0

Size: 2.19 MB

application/x-dosexec

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

MD5	c15e8c4aa190f2f7a0e2c58af492e9c0
Sha1	27118ab6795cd18ae868f8902d3f88b129e2cd6c
Sha256	2206ca98d1c523aa6b5fc27efd7918a596be8be6b0e8e64861977a4bc69a8d84
Sha384	e22ab78be0c303acb97a4ddc0eb403d8983ec1292d4eddd3dd149b0da08761c520062da71857b27c164358f17440484f
Sha512	c56e932f0250a8f8fe973aae4eb06d79fe169671fe0516dbc176a60a7318c2125dbede713ce4ebdd1f206a513e3637242ee5dadabf09c116966968e50eb1d35b
SSDeep	49152:j49IiVPBrDYzX1fFODG2nglOpqGF7yWhG8Q05kNjVTV3L:y55r0XVuG2nglOpR7yB8hklVBL
TLSH	F6A53305E1C6C4BAEC70973098F767CB1F317CD10A78B7977B99A54E2832AC1557A30A

PeID

Microsoft Visual C++ 8

STICH Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

pe:exe PE executable malicious

arc:entry Archive entry malicious

pe:autoit AutoIt compiled script malicious

·pe:autoit AutoIt compiled script malicious

arc:entry Archive entry

pe:exe PE executable

·bin Binary data

pe:rsrc PE resource

·bin Binary data

pe:rsrc PE resource

·bin Binary data

pe:rsrc PE resource

·bin Binary data

pe:rsrc PE resource

·bin Binary data

pe:rsrc PE resource

·bin Binary data

pe:rsrc PE resource

·bin Binary data

pe:rsrc PE resource

·img Image

pe:rsrc PE resource

·bin Binary data

pe:rsrc PE resource

·bin Binary data

pe:rsrc PE resource

·bin Binary data

pe:rsrc PE resource

·bin Binary data

pe:rsrc PE resource

·bin Binary data

pe:rsrc PE resource

·bin Binary data

pe:rsrc PE resource

·bin Binary data

pe:rsrc PE resource

·bin Binary data

pe:rsrc PE resource

·bin Binary data

pe:rsrc PE resource

·bin Binary data

pe:rsrc PE resource

·bin Binary data

pe:rsrc PE resource

·bin Binary data

pe:rsrc PE resource

·bin Binary data

pe:rsrc PE resource

·bin Binary data

pe:rsrc PE resource

·bin Binary data

pe:rsrc PE resource

·bin Binary data

pe:rsrc PE resource

·bin Binary data

pe:rsrc PE resource

·bin Binary data

pe:rsrc PE resource

·bin Binary data

pe:rsrc PE resource

·bin Binary data

pe:rsrc PE resource

·bin Binary data

pe:rsrc PE resource

·bin Binary data

pe:rsrc PE resource

·bin Binary data

pe:rsrc PE resource

·bin Binary data

pe:rsrc PE resource

·bin Binary data

pe:rsrc PE resource

·bin Binary data

pe:rsrc PE resource

·bin Binary data

pe:rsrc PE resource

·bin Binary data

pe:rsrc PE resource

·bin Binary data

pe:rsrc PE resource

·bin Binary data

pe:rsrc PE resource

·img Image

pe:rsrc PE resource

·bin Binary data

pe:rsrc PE resource

·bin Binary data

pe:rsrc PE resource

·bin Binary data

pe:rsrc PE resource

·bin Binary data

pe:rsrc PE resource

·bin Binary data

pe:rsrc PE resource

·bin Binary data

pe:rsrc PE resource

·bin Binary data

pe:rsrc PE resource

·bin Binary data

pe:rsrc PE resource

·bin Binary data

pe:rsrc PE resource

·bin Binary data

pe:rsrc PE resource

·bin Binary data

pe:rsrc PE resource

·bin Binary data

pe:rsrc PE resource

·bin Binary data

pe:rsrc PE resource

·bin Binary data

pe:rsrc PE resource

·bin Binary data

pe:rsrc PE resource

·bin Binary data

pe:rsrc PE resource

·bin Binary data

pe:rsrc PE resource

·pe:autoit AutoIt compiled script

pe:rsrc PE resource

·bin Binary data

pe:rsrc PE resource

·bin Binary data

pe:rsrc PE resource

·bin Binary data

pe:rsrc PE resource

·bin Binary data

pe:rsrc PE resource

·bin Binary data

pe:rsrc PE resource

·bin Binary data

pe:rsrc PE resource

·bin Binary data

pe:rsrc PE resource

·bin Binary data

pe:rsrc PE resource

·bin Binary data

Canonical tokens are language-independent identifiers. Taxonomy v@Analysis.TaxonomyVersion.

STICH Path = canonical chain with techniques STICH Shape = structure only STICH Hash = full SHA-256 fingerprint

7 / 7

Path pe:exe>arc:entry>pe:autoit>pe:autoit

Shape pe:exe>arc:entry>pe:autoit>pe:autoit

STICH Hash e9796aa6da09dd9d… Shape hash e9796aa6da09dd9d… 4 nodes

Path pe:exe>arc:entry>pe:exe>bin

Shape pe:exe>arc:entry>pe:exe>bin

STICH Hash f48df589c6d68fdc… Shape hash f48df589c6d68fdc… 4 nodes

Path pe:exe>arc:entry>pe:exe>pe:rsrc>bin

Shape pe:exe>arc:entry>pe:exe>pe:rsrc>bin

STICH Hash 477545abd9ae9430… Shape hash 477545abd9ae9430… 5 nodes

Path pe:exe>arc:entry>pe:exe>pe:rsrc>img

Shape pe:exe>arc:entry>pe:exe>pe:rsrc>img

STICH Hash 0f63a04ffb19928d… Shape hash 0f63a04ffb19928d… 5 nodes

Path pe:exe>pe:rsrc>bin

Shape pe:exe>pe:rsrc>bin

STICH Hash ffbc25e0c441492a… Shape hash ffbc25e0c441492a… 3 nodes

Path pe:exe>pe:rsrc>img

Shape pe:exe>pe:rsrc>img

STICH Hash ad169a5ef3d580c4… Shape hash ad169a5ef3d580c4… 3 nodes

Path pe:exe>pe:rsrc>pe:autoit

Shape pe:exe>pe:rsrc>pe:autoit

STICH Hash 1bab208d6de886d9… Shape hash 1bab208d6de886d9… 3 nodes

Name	Value
Info	PE Detect: PeReader OK (file layout)
Info	PDB Path: wextract.pdb

No malware configuration was found at this point.

You must be signed in to view YARA rules.