Malicious
AutoIt Compiled Script
MD5: 9d30b8f55df5cd82604271e8ee6f727d
Size: 8.39 MB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
AutoIt Compiled Script
Size
8.39 MB · 8,388,608 B
First seen
2026-08-07 10:00 · 2 months ago
Last seen
2026-08-07 10:00 · 2 months ago
Last analysis
2026-08-07 10:05 · 2 months ago
Hashes
MD5
9d30b8f55df5cd82604271e8ee6f727d
Sha1
b6406eecefa66d9fbfbe721d1bb3c38c1ddbc91a
Sha256
644667c869b560afdd523a5c2dae1e4a6753481f7b155df378cd59377e4b2b55
Sha384
4d4cd217475997b13801bf24f9368ab9af9e8937cbb1b0d2a9674a8eb0a5ceaf97b750d9ef8796dffb3352ac8357431d
Sha512
42ada1bc05202182e2ea863f3ab7f584faa14d7d4d8d831c8f0d9d3592876850992590d5aa29ca5a399a9e4bc775d8f114df47a6d24c6e3b7b29cd945c1c54b8
SSDeep
24576:xd+DXaYg2jEgC1ziUSOY4e+VtX+rAmwZB0Z+wJlozzu:SDNEg+ziUS4e+V4AmOB0Z+
TLSH
6486231A53E480B1E460DB789DA2819B5931BC616F79A7EF3228774F2F33AC4A174317
Detection
PeID
Microsoft Visual C++ 8.0 (DLL)
4 malicious · 68 files
A3X9d30b8f55df5cd82604271e8ee6f727d
Structure
BINResources
A3XSydney.a3x
A3Xaut342B.tmp.tok
A3X[Cleaned].au3
A3XAutoIt3.exe
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
Structural branches: 7
STICH kept: 1secondary ignored: 6
bin
4img
2Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:exe>pe:autoit>pe:autoit
Shape
pe:exe>pe:autoit>pe:autoit
malicious
3 nodes
| Name | Value |
|---|---|
| Info | PDB Path: wextract.pdb |
PE Layout
UNKNWOWNsuspect
Memoryhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential