Malicious
AutoIt Compiled Script
MD5: 92f3067f8f1d94cca862777828272ee3
Size: 1.58 MB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
AutoIt Compiled Script
Size
1.58 MB · 1,577,984 B
First seen
2026-08-22 06:00 · 2 months ago
Last seen
2026-08-22 06:00 · 2 months ago
Last analysis
2026-08-22 06:00 · 2 months ago
Hashes
MD5
92f3067f8f1d94cca862777828272ee3
Sha1
f23760c0cc0b6eb343f4c9f658e87476178a7fe0
Sha256
91702decfaf0d0501941ec71e9d9db522fb293aab485a766a5a9f0ccde3d983d
Sha384
ddd0a9975593326b8b88b1974e6e0182394345f5708c2823bcdd793d3de2afed6e067b65b784774e9ff45b6db532241a
Sha512
5327c33f598fc91588e39af19eace1e32ecb1246e78def759d6316dafbb3e3cb4a3dd0c6db8c2cda259d1ef84651887c9f4d7e13277f8e3319eb951e66027548
SSDeep
24576:JtlcxTOdR05ODAtuiSEWzH0aliXHyp6jq+NtziXix7SGP1nQTGTvvNZo4814yh/O:HlGTC05JJSuakSw/Ntx7SmnpvFZxw/Y
TLSH
1175232623D848ABE4F6433556F2A5A713B1BC93176247DF23985C4E2F636D5B0B8343
Detection
PeID
Microsoft Visual C++ 8.0 (DLL)
4 malicious · 68 files
A3X92f3067f8f1d94cca862777828272ee3
Structure
BINResources
A3XCause.a3x
A3Xaut94C3.tmp.tok
A3X[Cleaned].au3
A3XAutoIt3.exe
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
Structural branches: 7
STICH kept: 1secondary ignored: 6
bin
4img
2Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:exe>pe:autoit>pe:autoit
Shape
pe:exe>pe:autoit>pe:autoit
malicious
3 nodes
| Name | Value |
|---|---|
| Info | PDB Path: wextract.pdb |
PE Layout
UNKNWOWNsuspect
Memoryhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential