Suspect
fbcdc675ffc69cace3615ba1261763a9
AutoIt Compiled Script
MD5: fbcdc675ffc69cace3615ba1261763a9
Size: 2.15 MB
application/x-dosexec
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
| MD5 | fbcdc675ffc69cace3615ba1261763a9 |
| Sha1 | fcb64ae6a0ec8a25d91461cbd7d1921e26005bfd |
| Sha256 | a3b92ad72cd1a4b1be8718057d90026d2c0b07d04c8b8ae8ab8ab2b6c29fd895 |
| Sha384 | ff053c5ed621fac8fb7f63ec28a9c73d9c61000f4d485ac51db9908d487b196437689bbbc8b932126a43a492306a8705 |
| Sha512 | 8e8497fc51c6b429d445263412bd51214e8a358cb52e22f9fd9a26ca81a52352ab2ff23a78a7eaea9f9eb0be612bfe5cd63e38574c565efed95143603c136d1e |
| SSDeep | 49152:rJ35ajEmTTEQ+5s86ex7yQJy59SYiz9Yv:XaomTTLnVeJBZxYv |
| TLSH | 4EA523871AD448DBE83127358AF1E3825A22BC51677ACD6F6019BE4F3F632D93132752 |
PeID
Microsoft Visual C++ 8.0 (DLL)Microsoft Visual C++ v6.0 DLL
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
Structural branches: 7
STICH kept: 2secondary ignored: 5
bin
3img
2Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:exe>pe:rsrc>pe:autoit
Shape
pe:exe>pe:rsrc>pe:autoit
3 nodes
Path
pe:exe>pe:autoit
Shape
pe:exe>pe:autoit
2 nodes
| Name | Value |
|---|---|
| Info | PE Detect: PeReader OK (file layout) |
| Info | PDB Path: wextract.pdb |
No malware configuration was found at this point.
You must be signed in to view YARA rules.