cce96617ed0761b937f6ea6eede7d288

AutoIt Compiled Script

MD5: cce96617ed0761b937f6ea6eede7d288

Size: 1.76 MB

application/x-dosexec

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

MD5	cce96617ed0761b937f6ea6eede7d288
Sha1	2d65ad2c3c092158c678e9552735f0656c9d91c1
Sha256	4498c5d7ac8b2f170330c11d33e8bf28a9879964159ffc711009fd4fe902f77b
Sha384	4343e7c8d4f8480808604bc306394ab523d36fd031193e014bbfdefaba2c324ab5ae01200a0180ada186055b39c73cff
Sha512	8bc5f52d5e31b153948003980baa63d84e388d430db6357cfc4567a5d27603439fdf1259a18cc3c0817197f0c226d61fb43d9df89eb5f0f8f6b7b24b9f5e1e7f
SSDeep	49152:DkfovDwaxCH/WmLWoi3xS0TASv9hiXScH:/Eu34crv9YSc
TLSH	C1852353A3E88567F6A6377CA9F12323B2793C901B7393DF5A402A9C29337C65531722

PeID

Microsoft Visual C++ 8.0 (DLL)

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 7 STICH kept: 1secondary ignored: 6

bin 4img 2

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:exe>pe:autoit>pe:autoit

Shape pe:exe>pe:autoit>pe:autoit

malicious 3 nodes

Name	Value
Info	PE Detect: PeReader OK (file layout)
Info	PDB Path: wextract.pdb

PE Layout UNKNWOWNsuspect

Memoryhuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential

No malware configuration was found at this point.

PE Layout UNKNWOWNsuspect

Memoryhuhuhuhuhuhuhuhuhuhuhu

cce96617ed0761b937f6ea6eede7d288 › Resources › RT_RCDATA › ID:0000 › ID:1033 › AutoIt3.exe

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential

You must be signed in to view YARA rules.