Malicious
AutoIt Compiled Script
MD5: 4f8d31ea9c92ca7d2da3c6438f1c8ea1
Size: 2.18 MB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
AutoIt Compiled Script
Size
2.18 MB · 2,181,632 B
First seen
2026-08-02 14:15 · 2 months ago
Last seen
2026-08-02 14:15 · 2 months ago
Last analysis
2026-08-02 14:15 · 2 months ago
Hashes
MD5
4f8d31ea9c92ca7d2da3c6438f1c8ea1
Sha1
23039d7c9ae5ce061abef48d04444983d3da15d1
Sha256
47854afb3cfeb64a85dda148e00e5ca83168f431a28e5c5fb28733e37f484b13
Sha384
b181a4e565340d79a0f9e522a8a9c6c850b6c37fceec59ab0cee5b439f66692268a2f8f44d1ebf09ccc2a5af91c9286c
Sha512
ce3e554d39bcac6043b10be569bf8dd4771b66ea506ce2db2f76d48ed88d60906b0cc0e135e2a0cda7b0424db361254198066dfca253583ce029b7acc9128a1b
SSDeep
49152:BmTaEKDOfJ+XPE+b/Ap8miduNrCIZJ1q51SAP:B8PKR8+Lmid4rn1qC
TLSH
81A5231223E94482D4BA173A89F554576A31FC628B7236CF72D6FDAE1A13EE4F430316
Detection
PeID
Microsoft Visual C++ 8.0 (DLL)
4 malicious · 66 files
A3X4f8d31ea9c92ca7d2da3c6438f1c8ea1
Structure
BINResources
A3XOregon.a3x
A3Xaut221D.tmp.tok
A3X[Cleaned].au3
A3XAutoIt3.exe
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
Structural branches: 7
STICH kept: 2secondary ignored: 5
bin
3img
2Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:exe>pe:autoit>pe:autoit
Shape
pe:exe>pe:autoit>pe:autoit
malicious
3 nodes
Path
pe:exe>pe:rsrc>pe:autoit
Shape
pe:exe>pe:rsrc>pe:autoit
3 nodes
| Name | Value |
|---|---|
| Info | PDB Path: wextract.pdb |