cfc95149b7433840e6a64ff648a78575

AutoIt Compiled Script

MD5: cfc95149b7433840e6a64ff648a78575

Size: 8.39 MB

application/x-dosexec

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

MD5	cfc95149b7433840e6a64ff648a78575
Sha1	652cddd50fc79e027162b7502b7fff935aecf2b5
Sha256	580529f353d25341fb93ac3f616a58ad37ca8227866d0799e763191528878930
Sha384	c94f1382c4aa6724781846ed7ad33f16c4a1be738423bf375bc168978052961ef384214755f26ee0ff85db720a41fcad
Sha512	ebf7ad5553deedcd181b84c04967a590419f2a4f616baec248f50114b88d0aeed82911e278391fbdd2296592794bedee3fe2a9e32947c011b55f6f26306ef311
SSDeep	49152:4TUzqCLbVdjzhirlCx51kcWyyphQ6q1H:4TUzftdjzhirE/1kcApm6qh
TLSH	0C86232153DD4076D4BCAB7298F282966530FC8497B597EF22A4828E1F539C5F93133E

PeID

Microsoft Visual C++ 8.0 (DLL)Private EXE Protector V2.30-V2.3X -> SetiSoft Team

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 7 STICH kept: 1secondary ignored: 6

bin 4img 2

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:exe>pe:autoit>pe:autoit

Shape pe:exe>pe:autoit>pe:autoit

malicious 3 nodes

Name	Value
Info	PE Detect: PeReader OK (file layout)
Info	PDB Path: wextract.pdb

PE Layout UNKNWOWNsuspect

Memoryhuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential

No malware configuration was found at this point.

PE Layout UNKNWOWNsuspect

Memoryhuhuhuhuhuhuhuhuhuhuhu

cfc95149b7433840e6a64ff648a78575 › Resources › RT_RCDATA › ID:0000 › ID:1033 › AutoIt3.exe

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential

You must be signed in to view YARA rules.