Overview

overview

7

Static

static

3

AutoHotkey.chm

windows7-x64

1

AutoHotkey.chm

windows10-2004-x64

1

AutoHotkeyA32.exe

windows7-x64

3

AutoHotkeyA32.exe

windows10-2004-x64

7

AutoHotkeyU32.exe

windows7-x64

3

AutoHotkeyU32.exe

windows10-2004-x64

7

AutoHotkeyU64.exe

windows7-x64

3

AutoHotkeyU64.exe

windows10-2004-x64

7

Compiler/A...it.exe

windows7-x64

1

Compiler/A...it.exe

windows10-2004-x64

1

Compiler/Ahk2Exe.exe

windows7-x64

1

Compiler/Ahk2Exe.exe

windows10-2004-x64

1

Compiler/U...it.exe

windows7-x64

1

Compiler/U...it.exe

windows10-2004-x64

1

Compiler/U...it.exe

windows7-x64

1

Compiler/U...it.exe

windows10-2004-x64

1

Installer.js

windows7-x64

3

Installer.js

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    ab9bcb8a02aac5e2e631e30d21739306.bin

  • Size

    4.8MB

  • MD5

    ab9bcb8a02aac5e2e631e30d21739306

  • SHA1

    c24d1e19ae667612f4db37e1dfa8ef7f0820da8f

  • SHA256

    ebccb45a6a5848d97286b7d5688f8c2ddf5f992e496bd7ec4566f89297087309

  • SHA512

    dc53750cdc7af0521b8d28c863ba7d1f6a8f7f148711bbb113b64d73a5a9a6b5fa9ccd5be13ecce45f30a5f5832425a342b05cace1c701a89452f364003f9431

  • SSDEEP

    98304:2Ie4rqLzjJMYvrwlCgKDt2HrMk+ZqofjDVj1zQJ6aLKuus/uy2:2IfmPjmQM22HrMkOZjxjALKe0

Score
3/10

Malware Config

Signatures

  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

Files

  • ab9bcb8a02aac5e2e631e30d21739306.bin
    .zip

    Password: infected

  • AutoHotkey.chm
    .chm
  • AutoHotkeyA32.exe
    .exe windows:5 windows x86 arch:x86

    Password: infected

    800c7be30af85a66f969872b315b90a9


    Headers

    Imports

    Sections

  • AutoHotkeyU32.exe
    .exe windows:5 windows x86 arch:x86

    Password: infected

    799e82a8afbe5d6e1dee83dd142a0771


    Headers

    Imports

    Sections

  • AutoHotkeyU64.exe
    .exe windows:5 windows x64 arch:x64

    Password: infected

    35edb59c472711b282d0915e0b35cb35


    Headers

    Imports

    Sections

  • Compiler/ANSI 32-bit.bin
    .exe windows:5 windows x86 arch:x86

    Password: infected

    5f53e73fb77cbe208b82ede8c5c8bb99


    Headers

    Imports

    Sections

  • Compiler/Ahk2Exe.exe
    .exe windows:5 windows x86 arch:x86

    Password: infected

    153aa0db686aff28745c696da6ec7574


    Headers

    Imports

    Sections

  • Compiler/Unicode 32-bit.bin
    .exe windows:5 windows x86 arch:x86

    Password: infected

    153aa0db686aff28745c696da6ec7574


    Headers

    Imports

    Sections

  • Compiler/Unicode 64-bit.bin
    .exe windows:5 windows x64 arch:x64

    Password: infected

    713e93bfdf16fe149bec10141f7bfbbd


    Headers

    Imports

    Sections

  • Compiler/readme.txt
  • Installer.ahk
    .js
  • Template.ahk
  • WindowSpy.ahk
  • license.txt