Malicious
Malicious

6d81b3df81cec591cb49763098efdaa9

Share on LinkedIn
Print
AutoIt Compiled Script
MD5: 6d81b3df81cec591cb49763098efdaa9
Size: 1.81 MB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
File
Type
AutoIt Compiled Script
Size
1.81 MB · 1,807,360 B
First seen
2026-08-21 02:00 · 2 months ago
Last seen
2026-08-21 02:00 · 2 months ago
Last analysis
2026-08-21 02:02 · 2 months ago
Hashes
MD5 6d81b3df81cec591cb49763098efdaa9 Sha1 b93a0121ec5314f1c60ef5023c054a5af4a0d263 Sha256 56369be9ed5233ecdead1e173e500d990725ae511910c9db5e0dccc4f1b1ae78 Sha384 ef601a42a0210936bbb25dffa676f51f2ba0c35e91aa6957e9e1426bde96861947f73025e02ad5adafc7d5e55ab5659a Sha512 131e3f27c920630c8fceee96e7a07860cb01dd6c6c535e8f5028552c9c5741b0f4ceb3836eb41fc3a4f3fdefff09521045acfd1d607642d30c3591458cff9b73 SSDeep 49152:eXv/SMkoWz6tzYXelaoSyMm1N60S4Sdb2m2:eXiMkxz66FoS5fb2 TLSH 3D8523621BB064F8EEB4CB3458F18A53EA31BCC20A7557AF22D4895A7F137C69436317
Detection
PeID
Microsoft Visual C++ 8.0 (DLL)
4 malicious · 66 files
A3X6d81b3df81cec591cb49763098efdaa9
Structure
A3XOecd.a3x
A3XautD78A.tmp.tok
A3X[Cleaned].au3
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 7 STICH kept: 2secondary ignored: 5
bin 3img 2

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path pe:exe>pe:autoit>pe:autoit
Shape pe:exe>pe:autoit>pe:autoit
malicious 3 nodes
Path pe:exe>pe:rsrc>pe:autoit
Shape pe:exe>pe:rsrc>pe:autoit
3 nodes
Name Value
Info
PDB Path: wextract.pdb
An error has occurred. This application may no longer respond until reloaded. Reload 🗙