Malicious
AutoIt Compiled Script
MD5: 03ec40f20de00f9a88abdbeb9aeaee23
Size: 8.39 MB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
AutoIt Compiled Script
Size
8.39 MB · 8,388,608 B
First seen
2026-08-08 19:00 · 2 months ago
Last seen
2026-08-08 19:00 · 2 months ago
Last analysis
2026-08-08 19:01 · 2 months ago
Hashes
MD5
03ec40f20de00f9a88abdbeb9aeaee23
Sha1
c29f54761c1b9beeda874bc8436fe2cf0364ad09
Sha256
ffc138fd06fc0104ac8e812b6d6c40635c58e0abdc31d251a78218940d12fa13
Sha384
db9ad7453a98cafd28d65f702faedfa729fd2d761dae88352c11fcd32b408b09c8725511d21ac2a593f59efc7b66ea0e
Sha512
1c409a33f28172ecbdbbaffa870be5fa699faf39548cc11977a54df0aa4956a3c0182c67a2ee6203f356c954a423b07eda78154e55c012538f4700544d25c260
SSDeep
49152:KW88gMwGLya6E4yCZELiahj8K6fIdAMFBFbx7MvZ:788zLFGZEL9BrFBFbx7eZ
TLSH
7D86236303F05077E076277908E54B476635FD828A7A9ACF2BE57B5F2E02B84B074366
Detection
PeID
Microsoft Visual C++ 8.0 (DLL)
4 malicious · 68 files
A3X03ec40f20de00f9a88abdbeb9aeaee23
Structure
BINResources
A3XKathy.a3x
A3XautDF10.tmp.tok
A3X[Cleaned].au3
EXEAutoIt3.exe
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
Structural branches: 7
STICH kept: 1secondary ignored: 6
bin
4img
2Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:exe>pe:autoit>pe:autoit
Shape
pe:exe>pe:autoit>pe:autoit
malicious
3 nodes
| Name | Value |
|---|---|
| Info | PDB Path: wextract.pdb |
PE Layout
UNKNWOWNsuspect
Memoryhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential