f45dd38810c460ac20850571e7a608b6

AutoIt Compiled Script

MD5: f45dd38810c460ac20850571e7a608b6

Size: 1.58 MB

application/x-dosexec

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

MD5	f45dd38810c460ac20850571e7a608b6
Sha1	e28aff26ada916b9dea2c06d3c6c3a0a35da35a1
Sha256	f2ed264a15b32c47d14b21ce2176a8412856ffcb3990f1904af283ac21850a99
Sha384	255f52b680ef7f80a88bd275372a11fc834fb053fb8ddb919f747a2b6a0004fde0905276c2e054f0f375b86529f49691
Sha512	4c65ba5084aea95818b16c0f09a8bef93a0668c275930edb9ac0e22cb30c23d30e4688a08cb42954b06599849ef82be972d7addc5b8d42f0db37a9d975a25648
SSDeep	24576:q7tlODrEVSRTxQ3H+IQmNAqRLWFeM9Drx8CK0X+QA+Jv9hGVFpv6cuor:q7GDwaxCH/WmLWoi3xS0TASv9hiXScH
TLSH	5D75239387F841B6F7B777B9A9F21267627638545BB767DF0200469C09237C29231B22

PeID

Microsoft Visual C++ 8.0 (DLL)

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 7 STICH kept: 1secondary ignored: 6

bin 4img 2

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:exe>pe:autoit>pe:autoit

Shape pe:exe>pe:autoit>pe:autoit

malicious 3 nodes

Name	Value
Info	PE Detect: PeReader OK (file layout)
Info	PDB Path: wextract.pdb

PE Layout UNKNWOWNsuspect

Memoryhuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential

No malware configuration was found at this point.

PE Layout UNKNWOWNsuspect

Memoryhuhuhuhuhuhuhuhuhuhuhu

f45dd38810c460ac20850571e7a608b6 › Resources › RT_RCDATA › ID:0000 › ID:1033 › AutoIt3.exe

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential

You must be signed in to view YARA rules.