Malicious
AutoIt Compiled Script
MD5: 234bb25b1878650381668ca32a7254db
Size: 11.53 MB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
AutoIt Compiled Script
Size
11.53 MB · 11,534,336 B
First seen
2026-07-19 10:31 · 3 months ago
Last seen
2026-07-19 10:31 · 3 months ago
Last analysis
2026-07-19 10:31 · 3 months ago
Hashes
MD5
234bb25b1878650381668ca32a7254db
Sha1
5aa7cd09afef09c7b3b3bd7c401f776ecab0b18a
Sha256
d4e81a7304049c20e0b606220ff924dc48c70d46a8ab466c97d7c6a896e886f5
Sha384
ca155f1aab636a1f28052514a3679ea69c105b621dd58f9c4fb8c6837d166e1b34bc1b588207b255626cd217bcec076f
Sha512
4bb784e81ab8573e569438e795327fee5e4cc4be90c75d0d17b258e36c468e76df897c40fed1ab175054676f9ea919e11bda43550721abd5399cb23449c37bf7
SSDeep
49152:KNT7agYvl+bxc+4X6N/wFKZgyRBwD2nIUTKsp:KNT71YMdc+4KFwYZ5IUeW
TLSH
C5C633E116E94973E6793FB444F10561EF7B7C9016324ECF26B866881932BC1A63436F
Detection
PeID
Microsoft Visual C++ 8.0 (DLL)
4 malicious · 59 files
A3X234bb25b1878650381668ca32a7254db
Structure
BINResources
A3XPossession.a3x
A3Xaut4CBC.tmp.tok
A3X[Cleaned].au3
A3XAutoIt3.exe
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
Structural branches: 6
STICH kept: 1secondary ignored: 5
bin
4img
1Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:exe>pe:autoit>pe:autoit
Shape
pe:exe>pe:autoit>pe:autoit
malicious
3 nodes
| Name | Value |
|---|---|
| Info | PDB Path: wextract.pdb |
PE Layout
UNKNWOWNsuspect
Memoryhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential