Malicious
AutoIt Compiled Script
MD5: 169fbede3bb64c090d9a9afb47028858
Size: 1.81 MB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
AutoIt Compiled Script
Size
1.81 MB · 1,811,968 B
First seen
2026-08-15 06:46 · 2 months ago
Last seen
2026-08-15 06:46 · 2 months ago
Last analysis
2026-08-15 06:47 · 2 months ago
Hashes
MD5
169fbede3bb64c090d9a9afb47028858
Sha1
90ec4f7b57b2042b203a24afa09e94619c3fe66b
Sha256
af0e3ab0f2333998f0c457e0f4119a1554dc0e834d868b61bc4b7035904a2e8a
Sha384
b3564331b8964fb665b708e0abffbd68e8605305568fb81a0182c3d7e3a17c9eba9671326274221c53a9850a30ac4f01
Sha512
58fd4edf778469443bdc4464725274679a19bea511a3b679c01030e14181a04e6918501ffcab617832998e89432566e8304ad96f931224ed6c92342106d5c03b
SSDeep
49152:fLXqHvWEtzPra+Wxc2fJCrCgz5BvqA0cHPBvx+IW:fLX3EVHWxfQr1zTqA0cvBvE
TLSH
5085230352D80592E4BD0B7189FA42976932FC531A785E9F3790AD960FB3FD5AD3230A
Detection
PeID
Microsoft Visual C++ 8.0 (DLL)
4 malicious · 68 files
A3X169fbede3bb64c090d9a9afb47028858
Structure
BINResources
A3XCatalog.a3x
A3Xaut9EDD.tmp.tok
A3X[Cleaned].au3
EXEAutoIt3.exe
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
Structural branches: 7
STICH kept: 1secondary ignored: 6
bin
4img
2Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:exe>pe:autoit>pe:autoit
Shape
pe:exe>pe:autoit>pe:autoit
malicious
3 nodes
| Name | Value |
|---|---|
| Info | PDB Path: wextract.pdb |
PE Layout
UNKNWOWNsuspect
Memoryhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential