26bf5d63bc9d033cd52c263b2aa2ad1b

AutoIt Compiled Script

MD5: 26bf5d63bc9d033cd52c263b2aa2ad1b

Size: 1.53 MB

application/x-dosexec

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

File

Type

AutoIt Compiled Script

Size

1.53 MB · 1,533,112 B

First seen

2026-07-19 14:30 · 3 months ago

Last seen

2026-07-19 14:30 · 3 months ago

Last analysis

2026-07-19 14:30 · 3 months ago

Hashes

MD5 26bf5d63bc9d033cd52c263b2aa2ad1b Sha1 b0e2fe0a84bddaddddc3310511e434fa61df4ea9 Sha256 3ec59ae574589c01c611ba26289bc111c767d3ee56b1758d3df63a1600147019 Sha384 dd31f109012101f8b8fd43cb17956baa978dd3b10ec87f6b15d795075c6e11e06411f7f6f1fd23dee3cf45af6a7ceef2 Sha512 c8b4b4e3a1e655c60dbf69cff2f5d4694c1843a13ea79e5a9764b949849cacc07a2a4916739922b1ac9e5962afc61d000e06f07af7604c973070cd36ab88dbbf SSDeep 24576:9rsRcbYKNp03n4gZWmA7OABU5CpU8xPhuyHyCH+8xc9jeYu+gXTk0kyK:9rsabNNp03FWmA7O95iUUPwULH+8Ff+5 TLSH A96523956BD000AAD87BA3B89AF322536775BCC517F4D3CF624082A92F239C4717B746

Detection

PeID

Microsoft Visual C++ 8.0 (DLL)UPolyX 0.3 -> delikon

4 malicious · 60 files

A3X26bf5d63bc9d033cd52c263b2aa2ad1b

Structure

P7B[Authenticode]_c0956d28.p7b

BINResources

BINAVI

BINID:0BB9

BINID:1033

BINRT_ICON

BINID:0001

BINID:1033

BINID:0002

BINID:1033

BINID:0003

BINID:1033

BINID:0004

BINID:1033

BINID:0005

BINID:1033

BINRT_DIALOG

BINID:07D1

BINID:1033

BINID:07D2

BINID:1033

BINID:07D3

BINID:1033

BINID:07D4

BINID:1033

BINID:07D5

BINID:1033

BINID:07D6

BINID:1033

BINRT_STRING

BINID:003F

BINID:1033

BINID:004C

BINID:1033

BINID:004D

BINID:1033

BINID:0050

BINID:1033

BINID:0053

BINID:1033

BINID:0055

BINID:1033

BINRT_RCDATA

BINID:0000

BINID:1033

EXEAutoIt3.exe

Structure

P7B[Authenticode]_bb770a0a.p7b

BINRT_GROUP_CURSOR4

BINID:0BB8

BINID:1033

BINRT_VERSION

BINID:0001

BINID:1033

BINRT_MANIFEST

BINID:0001

BINID:1033

A3XSimpsons.a3x

A3Xaut810E.tmp.tok

A3X[Cleaned].au3

EXEAutoIt3.exe

Structure

P7B[Authenticode]_147eb74a.p7b

BINResources

BINRT_ICON

BINID:0001

BINID:2057

BINID:0002

BINID:2057

BINID:0003

BINID:2057

BINID:0004

BINID:2057

BINID:0005

BINID:2057

BINID:0006

BINID:2057

BINID:0007

IMGID:2057

IMGID:2057-preview.png

BINID:0008

BINID:2057

BINID:0009

BINID:2057

BINID:000A

BINID:2057

BINID:000B

BINID:2057

BINID:000C

BINID:2057

BINID:000D

BINID:2057

BINRT_MENU

BINID:00A6

BINID:2057

BINRT_DIALOG

BINID:03E8

BINID:2057

BINRT_STRING

BINID:0007

BINID:2057

BINID:0008

BINID:2057

BINID:0009

BINID:2057

BINID:000A

BINID:2057

BINID:000B

BINID:2057

BINID:000C

BINID:2057

BINID:0139

BINID:2057

BINRT_GROUP_CURSOR4

BINID:0063

BINID:2057

BINID:00A2

BINID:2057

BINID:00A4

BINID:2057

BINID:00A9

BINID:2057

BINRT_VERSION

BINID:0001

BINID:2057

BINRT_MANIFEST

BINID:0001

BINID:1033

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 7 STICH kept: 1secondary ignored: 6

bin 5img 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:exe>pe:autoit>pe:autoit

Shape pe:exe>pe:autoit>pe:autoit

malicious 3 nodes

Name	Value
Info	Authenticode present at 0x173C00 size 10424 bytes
Info	PDB Path: wextract.pdb

4 malicious · 60 files

A3X26bf5d63bc9d033cd52c263b2aa2ad1b

Structure

P7B[Authenticode]_c0956d28.p7b

BINResources

A3XSimpsons.a3x

A3Xaut810E.tmp.tok

A3X[Cleaned].au3

EXEAutoIt3.exe

No malware configuration was found at this point.