Malicious
AutoIt Compiled Script
MD5: 55086caf39129a111ae656fed7976469
Size: 1.62 MB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
AutoIt Compiled Script
Size
1.62 MB · 1,619,456 B
First seen
2026-07-30 08:30 · 2 months ago
Last seen
2026-07-30 08:30 · 2 months ago
Last analysis
2026-07-30 08:31 · 2 months ago
Hashes
MD5
55086caf39129a111ae656fed7976469
Sha1
b88ab0fbf814ed90523ae152caff3046f5863e66
Sha256
9b4fc704f7a53929ab614c2fc68bb63b85f901043375914a4e92cd0a8d32d643
Sha384
1c567a178c73b9cab65241007acfc594eb7a9bb0ce271690938016041bfce15c2f5992e600f12b41626a54334ab452a6
Sha512
01c4f0dc257d11a3b3fdce50df2c1e0d26e48c0e902b7872e8bb4a93179cb86ab5da4fd6e385cf582e42b2f6453afb12c1dc740ef8133f90cbde00661e3690e1
SSDeep
24576:QnTY4LWrzJEdOPl3EuMaPn8C5FAAojYunEPAsc1g1pVhUCBglF1VSk0qEIwdC:ckPrM8ujswg1pVhQTVF0qf
TLSH
06752382E6E50437FDF3A7B440B5054BB27631886B39C2EB365085893E632C9BD7539B
Detection
PeID
Microsoft Visual C++ 8.0 (DLL)
4 malicious · 56 files
A3X55086caf39129a111ae656fed7976469
Structure
P7B[Authenticode]_bbd6f997.p7b
BINResources
A3XSubdivision.a3x
A3XautD4DA.tmp.tok
A3X[Cleaned].au3
A3XAutoIt3.exe
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
Structural branches: 7
STICH kept: 1secondary ignored: 6
bin
5img
1Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:exe>pe:autoit>pe:autoit
Shape
pe:exe>pe:autoit>pe:autoit
malicious
3 nodes
| Name | Value |
|---|---|
| Info | Authenticode present at 0x188A00 size 11264 bytes |
| Info | PDB Path: wextract.pdb |
PE Layout
UNKNWOWNsuspect
Memoryhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential