Malicious AutoIt Compiled Script analysis – a2db563d7ccc

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

File

Type

AutoIt Compiled Script

Size

685.28 KB · 685,284 B

First seen

2026-08-19 20:22 · 2 months ago

Last seen

2026-08-19 20:22 · 2 months ago

Last analysis

2026-08-19 20:23 · 2 months ago

Hashes

MD5 7accbd5bef4f2a2b76ad500862a4be11 Sha1 7777c4586a7e96e654b2a78de67cf00423dd18f6 Sha256 a2db563d7ccc772631e14803cd85a2efc71472d6119b19bcf4cd43e24ab0d676 Sha384 b114cee8faec6d10d6dcca5076016af3b052f29ebe0ba755729e96f0e33c47023346e54357f41cc3a9bb574979317467 Sha512 2074bd188c430b70e7ce1662a66864cfff2dde73dae095b16d618ddc0318a556a84c0e78d2dd7e38f0bef42f2f2c0a86d83ea7d2ba923824ec7d26f8c6ff8ba2 SSDeep 12288:CZjMLf11MmPQeRXEHYYS3gA0FJO1t37nMtDr5qbym8:CafIiy4NwdLTtDAN8 TLSH E3E4BF02B7C640F6EDA33A741577E32BDB357A185327C98BEFE02E658E111409A39376

Detection

PeID

Microsoft Visual C++ 6.0 DLL (Debug)Microsoft Visual C++ 7.0 - 8.0Microsoft Visual C++ 8Microsoft Visual C++ 8Microsoft Visual C++ v6.0 DLLVC8 -> Microsoft Corporation

3 malicious · 23 files

A3XLauncher de Fakes.exe

Structure

A3XOverlay_2d1ed5fb.bin

BINResources

A3XautE245.tmp

A3X[Cleaned].au3

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1

bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:exe>pe:autoit

Shape pe:exe>pe:autoit

malicious 2 nodes

Name	Value
Info	Overlay extracted: Overlay_2d1ed5fb.bin (49380 bytes)