Malicious
Malicious

Share on LinkedIn
Print
AutoIt Compiled Script
MD5:
Size: 0 B
application/x-dosexec
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
File
Type
AutoIt Compiled Script
3 malicious · 139 files
A3Xc2a887ef8ee708ef5c017055479d30a0
WSFapplication.exe
Structure
WSFOverlay_4bab27d7.bin
IMG0x002E5CE5.svg
IMG0x0030145F.svg
IMG0x0057B509.svg
IMG0x006B865D.svg
IMG0x007B22E7.svg
IMG0x00826B60.svg
IMG0x00A26953.svg
IMG0x00E551E1.svg
IMG0x01297CC4.svg
IMG0x0134860B.svg
IMG0x016128D1.svg
IMG0x0187D41C.svg
AIFCUps.aifc
AIFCStatement.aifc
BINConcluded
BINSearches
A3XDisaster.aifc
AIFCAnnually.aifc
BINCool
BINMatter
AIFCDis.aifc
URLs in VB Code - #1 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #2 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #3 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #4 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #5 URIsuspect
http:/huhuhuhuhuhuhu
URLs in VB Code - #6 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #7 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #8 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #9 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #10 URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #11 URIsuspect
http:/huhuhuhuhuhuhu
URLs in VB Code - #12 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #13 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #14 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #15 URIsuspect
https:huhuhuhuhuhuhu
URLs in VB Code - #16 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #17 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #18 URIsuspect
http:/huhuhuhuhuhuhu
URLs in VB Code - #19 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #20 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #21 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #22 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #23 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #24 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #25 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #26 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #27 URIsuspect
http:/huhuhuhuhuhuhu
URLs in VB Code - #28 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #29 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #30 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #31 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #32 URIsuspect
http:/huhuhuhuhuhuhu
URLs in VB Code - #33 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #34 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #35 URIsuspect
http:/huhuhuhuhuhuhu
URLs in VB Code - #36 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #37 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #38 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #39 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #40 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #41 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #42 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #43 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #44 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #45 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #46 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #47 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #48 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #49 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #50 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #51 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #52 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #53 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #54 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #55 URIsuspect
http:/huhuhuhuhuhuhu
URLs in VB Code - #56 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #57 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #58 URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #59 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #60 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #61 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #62 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #63 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #64 URIsuspect
http:/huhuhuhuhuhuhu
URLs in VB Code - #65 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #66 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #67 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #68 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #69 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #70 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #71 URIsuspect
htthuhuhuhu
URLs in VB Code - #72 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #73 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #74 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #75 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #76 URIsuspect
http:/huhuhuhuhuhuhu
URLs in VB Code - #77 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #78 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #79 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #80 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #81 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #82 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #83 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #84 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #85 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #86 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
An error has occurred. This application may no longer respond until reloaded. Reload 🗙