Malicious
Malicious

55ecbb206e755651ddc70297948d8753

Share on LinkedIn
Print
AutoIt Compiled Script
MD5: 55ecbb206e755651ddc70297948d8753
Size: 1.9 MB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
File
Type
AutoIt Compiled Script
Size
1.9 MB · 1,896,960 B
First seen
2026-08-18 23:01 · 2 months ago
Last seen
2026-08-18 23:01 · 2 months ago
Last analysis
2026-08-18 23:01 · 2 months ago
Hashes
MD5 55ecbb206e755651ddc70297948d8753 Sha1 6539df0786d917bd699e0b197a1b6f90bfc592dd Sha256 8910f0cb2eb97c3b1ced8b512bb34884a958ba7d81829841b2e60eb487157662 Sha384 661ea87b8cc5103eb77b79f8f09cef3357ad8e3093ac6b7ccde9f3384dddb9858b6cdaea6b82f118e41187bde6042feb Sha512 a949281761cf35234323e929f6e1312aadb320fce429e7c348696ec4b3f39d9816a661d739404a716425d2016c4a4b4509469ae3b541645dc5ef87a14a61106f SSDeep 49152:og5kN/EgqxZczQWaHD5IpLvjj+Zsln3jjNqm3:owoEzIpSal3jxqi TLSH 2395236013F4C4A5ECB657B598F74E63967078025A3EA7CF35E69D4A2F272C4893130E
Detection
PeID
Microsoft Visual C++ 8.0 (DLL)
4 malicious · 66 files
A3X55ecbb206e755651ddc70297948d8753
Structure
A3XJason.a3x
A3XautD5D7.tmp.tok
A3X[Cleaned].au3
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 7 STICH kept: 2secondary ignored: 5
bin 3img 2

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path pe:exe>pe:autoit>pe:autoit
Shape pe:exe>pe:autoit>pe:autoit
malicious 3 nodes
Path pe:exe>pe:rsrc>pe:autoit
Shape pe:exe>pe:rsrc>pe:autoit
3 nodes
Name Value
Info
PDB Path: wextract.pdb
An error has occurred. This application may no longer respond until reloaded. Reload 🗙