Suspect
AutoIt Compiled Script
MD5: 040b65e7b991e772aac124dd1664dcc1
Size: 5.68 MB
application/x-dosexec
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
File
Type
AutoIt Compiled Script
Size
5.68 MB · 5,681,664 B
First seen
2026-09-01 13:00 · one month ago
Last seen
2026-09-01 13:00 · one month ago
Last analysis
2026-09-01 13:01 · one month ago
Hashes
MD5
040b65e7b991e772aac124dd1664dcc1
Sha1
b7c2d058ae105e65cec9c0d90d0e8550b00ae26c
Sha256
e30cb7c91bfab4c261e8bb3f183a5df5b6957e5ebd22d754c2d13fffdb9d9eee
Sha384
4cb979b1dcf3b7c84910997c814cec7159f13f30b6a6589d9158271c1cd922399a0f05f4c04bec1426d5e6066afb16ae
Sha512
5b8bf9e1b80fcb75cd27b018f996c42c91a71eac739618657efcccb80ce20d63cfd21411f5f8b610bc9f5a6426526e6129f9f74d7bc2cacd8ff9b4af2aaf51d0
SSDeep
98304:S48axesGEKDlNgTlH7lHrwURUIQYtuwNK7fXZWp+6E9Zgghpmmsym:SO1GEKPgTNRHr4I5uwNK7xWr4WEpmm8
TLSH
2046336797910094E0321FBE6CEB18A14D737CD97B2D129F1580BB9B1DF37E226A071A
Detection
PeID
Microsoft Visual C++ 8.0 (DLL)UPolyX 0.3 -> delikon
66 files
A3X040b65e7b991e772aac124dd1664dcc1
Structure
BINResources
A3XTonight.a3x
A3XAutoIt3.exe
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
Structural branches: 7
STICH kept: 1secondary ignored: 6
bin
4img
2Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:exe>pe:autoit
Shape
pe:exe>pe:autoit
2 nodes
| Name | Value |
|---|---|
| Info | PE Detect: PeReader OK (file layout) |
| Info | PDB Path: wextract.pdb |
PE Layout
UNKNWOWNsuspect
Memoryhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential