c63d52054c33f46ec855c166eeed30f8

AutoIt Compiled Script

MD5: c63d52054c33f46ec855c166eeed30f8

Size: 1.77 MB

application/x-dosexec

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

MD5	c63d52054c33f46ec855c166eeed30f8
Sha1	4966c56c92429c0e11b67e30799cd5618e6fd94a
Sha256	a2797646777e379eb72fdd6f81ed1988216e191d7cee04e5b022d77d796886ea
Sha384	ab2856adf5ad209937f880a1cbcd3fde2cc833b7eed1f62c190ea393c82cf83c2e707cb29595e480b21a4a2948e1fd8d
Sha512	57747c4ce68641e59d2f33f74de6b6d408cdb120955c91c059d236adf2aa0d3b5017296a8ec5b9fce0011fd65cd9a165e40b2e8554c8748bb359e6575c33c7a9
SSDeep	49152:jsQi8s7goiIWd8kWTq4QDa1PRl6D18joSkyV23f:jsF8bDdB48qPRC18jxKf
TLSH	9A85234363E286E5F4B26B74A8F641939B337D825A77C58F1290FAD90F76085E630B13

PeID

Microsoft Visual C++ 8.0 (DLL)Microsoft Visual C++ v6.0 DLL

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 7 STICH kept: 1secondary ignored: 6

bin 4img 2

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:exe>pe:autoit>pe:autoit

Shape pe:exe>pe:autoit>pe:autoit

malicious 3 nodes

Name	Value
Info	PE Detect: PeReader OK (file layout)
Info	PDB Path: wextract.pdb

PE Layout UNKNWOWNsuspect

Memoryhuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential

No malware configuration was found at this point.

PE Layout UNKNWOWNsuspect

Memoryhuhuhuhuhuhuhuhuhuhuhu

c63d52054c33f46ec855c166eeed30f8 › Resources › RT_RCDATA › ID:0000 › ID:1033 › AutoIt3.exe

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential

You must be signed in to view YARA rules.