Malicious
AutoIt Compiled Script
MD5: 1a92ab29917b5940f9108d54fedc8ecb
Size: 5.92 MB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
AutoIt Compiled Script
Size
5.92 MB · 5,922,816 B
First seen
2026-08-30 19:15 · one month ago
Last seen
2026-08-30 19:15 · one month ago
Last analysis
2026-08-30 19:17 · one month ago
Hashes
MD5
1a92ab29917b5940f9108d54fedc8ecb
Sha1
524f20553e0dfe6b24579c761de50b07efe00915
Sha256
ee1f035f485e2c215369c123e190185e8a4a6f34c7562e96ef058ab9e2f2a10f
Sha384
ba7dee742eb5b791cac0f22e32628f8de100e742b2c2d48c3a061700114881cef844db435e1d6c52c704e91558a0d9f5
Sha512
94d9245060d3429315067fa5cd327c98d6fa188afeea600c8a42aa8a87da8ca03fea6d4628aa240a869a076d8433280663c5d23938213c19faff68417bc9e25a
SSDeep
98304:h0AP+IPjin74JFLRLo4dGPrWAUX5GjMFPbM/kdUPY8nGmkoIyCh:WAP+0jinaFLsSUMBMMdkJGmqy
TLSH
875633C3B951C4B1F9364E316877899A973A7C7B5DA9228B2040FEC139B127285F3B17
Detection
PeID
Microsoft Visual C++ 8.0 (DLL)
4 malicious · 67 files
A3X1a92ab29917b5940f9108d54fedc8ecb
Structure
BINResources
A3XEncouraged.a3x
A3Xaut1259.tmp.tok
A3X[Cleaned].au3
A3XAutoIt3.exe
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
Structural branches: 6
STICH kept: 1secondary ignored: 5
bin
4img
1Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:exe>pe:autoit>pe:autoit
Shape
pe:exe>pe:autoit>pe:autoit
malicious
3 nodes
| Name | Value |
|---|---|
| Info | PDB Path: wextract.pdb |
PE Layout
UNKNWOWNsuspect
Memoryhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential