Malicious
AutoIt Compiled Script
MD5: 111eebbdb30ac11494f769e6652d32f1
Size: 1.28 MB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
AutoIt Compiled Script
Size
1.28 MB · 1,277,952 B
First seen
2026-09-03 17:00 · one month ago
Last seen
2026-09-03 17:00 · one month ago
Last analysis
2026-09-03 17:00 · one month ago
Hashes
MD5
111eebbdb30ac11494f769e6652d32f1
Sha1
14968edb0bcd9fde9d3151872dba0fe40318571a
Sha256
533a9a6ff75a172b2e996391ad2dd93e615b31fd6f920e28a111f94284400440
Sha384
5933dbcef571022b28f4d5ed596fe55ba60c8c8764706e48358da506127c83e9c0f749c68e2c4bd211430bbba21512a1
Sha512
491dd67fd06871fb87622ace65431813750c81b4ecc82ef6ee67c086d95aa45ae937f95e84878b8aab2944cf97312c05d7e00d79453b388155a2cb7bcc834d65
SSDeep
24576:w/uno+72IgalbAco+P94kfjdpGW+4QmeWvf6GlIY6Ih+:Pmc32+PGW/QmeWvrL6I
TLSH
EC4523A111F08577F97A93790CE6C223A532BC905B758B8F2396B29E1F33AC05532767
Detection
PeID
Microsoft Visual C++ 8.0 (DLL)
4 malicious · 68 files
A3X111eebbdb30ac11494f769e6652d32f1
Structure
BINResources
A3XSettings.a3x
A3Xaut6753.tmp.tok
A3X[Cleaned].au3
A3XAutoIt3.exe
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
Structural branches: 7
STICH kept: 1secondary ignored: 6
bin
4img
2Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:exe>pe:autoit>pe:autoit
Shape
pe:exe>pe:autoit>pe:autoit
malicious
3 nodes
| Name | Value |
|---|---|
| Info | PDB Path: wextract.pdb |
PE Layout
UNKNWOWNsuspect
Memoryhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential