Malicious
Malicious

a64c683e7d79e9f81ae388cd0ba05173

Share on LinkedIn
Print
AutoIt Compiled Script
MD5: a64c683e7d79e9f81ae388cd0ba05173
Size: 10.96 MB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
File
Type
AutoIt Compiled Script
Size
10.96 MB · 10,961,408 B
First seen
2026-08-13 01:32 · 2 months ago
Last seen
2026-08-13 01:32 · 2 months ago
Last analysis
2026-08-13 01:32 · 2 months ago
Hashes
MD5 a64c683e7d79e9f81ae388cd0ba05173 Sha1 0304613134a48199b7e21153a05309c2e9fa896e Sha256 4ffb7afc5a85fe8d342ed584cce1579240124c74f11808ebb178d33da8c79779 Sha384 542aeaf5f0fa76eee1340cf43fa6f1527d6ce6fb838cfa2dca5c61dfa1c6264e4d21e44bcfc5231b22bb37e5447711dd Sha512 2d869d2578c25289686b3937be4dbed4bfa6098b697814fe33d633e7ab4330bc0353e4ec12043e58989cf573c9e5795158c75d52cc4f90ed3d5446e1b98f2e27 SSDeep 196608:rcjsBvvKYTIw1+8cMKDhJUJw2srwxxio7oCLcRXuxzAH0hCOlZlPojVSD7GEJ:rfB6/wAMihgOrmiGov1W42COlMQD TLSH 09B6339573A80499F07D5BF609730AE7AE31FCDB258A27CFD71982181EE32968131367
Detection
PeID
Microsoft Visual C++ 8.0 (DLL)
4 malicious · 66 files
A3Xa64c683e7d79e9f81ae388cd0ba05173
Structure
A3XBreeding.a3x
A3XautCDE7.tmp.tok
A3X[Cleaned].au3
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 7 STICH kept: 2secondary ignored: 5
bin 3img 2

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path pe:exe>pe:autoit>pe:autoit
Shape pe:exe>pe:autoit>pe:autoit
malicious 3 nodes
Path pe:exe>pe:rsrc>pe:autoit
Shape pe:exe>pe:rsrc>pe:autoit
3 nodes
Name Value
Info
PDB Path: wextract.pdb
An error has occurred. This application may no longer respond until reloaded. Reload 🗙