Malicious
AutoIt Compiled Script
MD5: 25d4dc16ff90dad6221c7846336f357f
Size: 2.24 MB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
AutoIt Compiled Script
Size
2.24 MB · 2,240,000 B
First seen
2026-08-04 19:46 · 2 months ago
Last seen
2026-08-04 19:46 · 2 months ago
Last analysis
2026-08-04 19:48 · 2 months ago
Hashes
MD5
25d4dc16ff90dad6221c7846336f357f
Sha1
03e70215222767e6fde4a379b7979d31bf5f12ef
Sha256
4b788dc59db568205a6180f30bae301d6107896ee3e80c1edca4017c9bee5bed
Sha384
da5ed6fdc96dc0661026a1f79eedbdc18a3b316a0feed19d0b6500d38dad08bc3742da5339881422f3cd6b3f7ecbdcf6
Sha512
a8f2312b5bad3e09dd913bc0197c49f26c62e31b9464ded2b440b92746f567fd737424f2da6997b9284abc0b3cd48f658f85d575b42adbeb700c2f4acc60f00b
SSDeep
49152:2FgFI1VciQbuls6SVZO4/AYMqvainRcchDuBSwujCxW3QsZ6BveK:AZVM03SVZSYMqvaiRcchDsSbjWW3nZCe
TLSH
5BA52362A3D50576D8FAAB3C86B642AB17317E6D567C5D8B13C4C81E1F33A918A3034F
Detection
PeID
Microsoft Visual C++ 8.0 (DLL)
4 malicious · 68 files
A3X25d4dc16ff90dad6221c7846336f357f
Structure
BINResources
A3XBasename.a3x
A3XautC11D.tmp.tok
A3X[Cleaned].au3
A3XAutoIt3.exe
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
Structural branches: 7
STICH kept: 1secondary ignored: 6
bin
4img
2Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:exe>pe:autoit>pe:autoit
Shape
pe:exe>pe:autoit>pe:autoit
malicious
3 nodes
| Name | Value |
|---|---|
| Info | PDB Path: wextract.pdb |
PE Layout
UNKNWOWNsuspect
Memoryhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential