Malicious
Malicious

ZIP Archive
MD5: e187bbb0601c6367c3628d70f4fa4b71
Size: 772.49 KB
application/zip
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 e187bbb0601c6367c3628d70f4fa4b71
Sha1 77e2f17283078ba6b88764b1fb3b04dacccc4c9f
Sha256 822361507fc3b7ac3ea86cc6bf116d6c7b6d3ce844e09afcfc638dda2cdec596
Sha384 e094dcb576be8d4cfc0aa97bfc85e227a2bdfd1899c0389508f0c587abc7101ff01ea3e625b6b93a3660a8dc278b647f
Sha512 7f66912f535a207d5e4cf627ee1f187b44185fb4d845aeb6b4f7a84e3b67cee938e9e6cc2c6634f777f8267db8a3936a24849f801d3e1bfc41a816b717c4e484
SSDeep 12288:zWFHAjF5Dbyc2R4EgzEw4knBzBdZVzmFVo1Q+qLMxQ60T7Gso5H/vYCs1eblYchH:zoYF1cBYEZknBz1p6VyQ+fQ6g7a5XYCD
TLSH DEF43369DBB9B0D7217C5DA4A548BAD210E5F33186464EEF7234D733A6032418BBF8C6
aut9C61.tmp.tok
Malicious
[Cleaned].au3
Malicious
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:2057
ID:0002
ID:2057
ID:0003
ID:2057
ID:0004
ID:2057
ID:0005
ID:2057
ID:0006
ID:2057
ID:0007
ID:2057
ID:0008
ID:2057
ID:0009
ID:2057
ID:000A
ID:2057
ID:000B
ID:2057
RT_MENU
ID:00A6
ID:2057
RT_STRING
ID:0007
ID:2057
ID:0008
ID:2057
ID:0009
ID:2057
ID:000A
ID:2057
ID:000B
ID:2057
ID:000C
ID:2057
ID:0139
ID:2057
RT_RCDATA
ID:0000
RT_GROUP_CURSOR4
ID:0063
ID:2057
ID:00A2
ID:2057
ID:00A4
ID:2057
ID:00A9
ID:2057
RT_VERSION
ID:0001
ID:2057
RT_MANIFEST
ID:0001
ID:2057
aut9C61.tmp.tok
Malicious
[Cleaned].au3
Malicious
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:2057
ID:0002
ID:2057
ID:0003
ID:2057
ID:0004
ID:2057
ID:0005
ID:2057
ID:0006
ID:2057
ID:0007
ID:2057
ID:0008
ID:2057
ID:0009
ID:2057
ID:000A
ID:2057
ID:000B
ID:2057
RT_MENU
ID:00A6
ID:2057
RT_STRING
ID:0007
ID:2057
ID:0008
ID:2057
ID:0009
ID:2057
ID:000A
ID:2057
ID:000B
ID:2057
ID:000C
ID:2057
ID:0139
ID:2057
RT_RCDATA
ID:0000
RT_GROUP_CURSOR4
ID:0063
ID:2057
ID:00A2
ID:2057
ID:00A4
ID:2057
ID:00A9
ID:2057
RT_VERSION
ID:0001
ID:2057
RT_MANIFEST
ID:0001
ID:2057
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙