Malicious
AutoIt Compiled Script
MD5: d1534b6d3c5147dbeeeef70d9fb834fa
Size: 1.43 MB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
| MD5 | d1534b6d3c5147dbeeeef70d9fb834fa |
| Sha1 | 05495169b9dfb992e14a35b5d26af6f81db8a5f1 |
| Sha256 | 49d1be42dd6a6008ec6511feb35b68025c64feeb03273196c92c479707a9331c |
| Sha384 | 0ae8b4af532ce17cdc5dcdcd3e2d17f9efd4a7678b09668ced71a53b5e1d78ddd5b902abbe8a6bfe65d36c9440d67ea3 |
| Sha512 | a8a694e365acbe6d2a2be07c6511d814d39a443e67cc3b9699fb18d482dd0c75669ed194e2b12cd2fa7c2c9c9a1dd953d8598e66ce6235064b901ea1553b8fde |
| SSDeep | 24576:V8D0q8jW/JvZRpCoJPC2RHeAc15fhEnUZTDyVssqznJdKnnupyhPM:V8DF8jgvZFJLJq5ZEn02VhqTunQyh |
| TLSH | 6365230113E049E6E1BA57B4D8F341A66630FC81AB72DA9F239576873E337D25A3035E |
PeID
Microsoft Visual C++ 8.0 (DLL)Microsoft Visual C++ v6.0 DLLUPolyX 0.3 -> delikon
Malicious
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
Structural branches: 7
STICH kept: 1secondary ignored: 6
bin
4img
2Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:exe>pe:autoit>pe:autoit
Shape
pe:exe>pe:autoit>pe:autoit
malicious
3 nodes
| Name | Value |
|---|---|
| Info | PE Detect: PeReader OK (file layout) |
| Info | PDB Path: wextract.pdb |