Malicious
AutoIt Compiled Script
MD5: 45fdfc4903ce65f35042320cdaeb45ae
Size: 6.01 MB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
AutoIt Compiled Script
Size
6.01 MB · 6,009,856 B
First seen
2026-09-22 13:00 · one month ago
Last seen
2026-09-22 13:00 · one month ago
Last analysis
2026-09-22 13:02 · one month ago
Hashes
MD5
45fdfc4903ce65f35042320cdaeb45ae
Sha1
068eb49937c2973c14ed0c1d91b192f05a866b31
Sha256
273fe8743a0deb9e051e9a2aad3f919813767ce0fb4b58be72b1b22a1a4fead2
Sha384
628cf608d617b81322632654dc1f37015f92f61e4e6f58cc2b3f0818172af6ab7bdd3ed15b5b8da72147e0f7a3e41110
Sha512
6f86447d4b8066400abb2b5874dd4d57dacb794a3ca7845a825ded4cda209c92e50ff5862988518786e4fdff0a33081e332fb24e8695df583cafa8279038b901
SSDeep
98304:hueWqQL+7La1eeiLH4WGc/DRQIFRVp0pr1iZLGKEI/YX1CiyNYiV6JuNC3B7:fZbLH4zQDRQWUcLGfXQ3YS6yCR7
TLSH
F156330133D08166D0B743399AF1E94A78327E611702529F7650BFEF6A33BD6997838B
Detection
PeID
Microsoft Visual C++ 8.0 (DLL)Microsoft Visual C++ v6.0 DLL
4 malicious · 67 files
A3X45fdfc4903ce65f35042320cdaeb45ae
Structure
BINResources
A3XAlexandria.a3x
A3Xaut96A8.tmp.tok
A3X[Cleaned].au3
A3XAutoIt3.exe
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
Structural branches: 6
STICH kept: 1secondary ignored: 5
bin
4img
1Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:exe>pe:autoit>pe:autoit
Shape
pe:exe>pe:autoit>pe:autoit
malicious
3 nodes
| Name | Value |
|---|---|
| Info | PDB Path: wextract.pdb |
PE Layout
UNKNWOWNsuspect
Memoryhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential