Malicious
aa361a2c34222dd96b9cb8a6ac38d7de
AutoIt Compiled Script
MD5: aa361a2c34222dd96b9cb8a6ac38d7de
Size: 1.61 MB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
AutoIt Compiled Script
Size
1.61 MB · 1,608,704 B
First seen
2026-08-04 23:30 · 2 months ago
Last seen
2026-08-04 23:30 · 2 months ago
Last analysis
2026-08-04 23:31 · 2 months ago
Hashes
MD5
aa361a2c34222dd96b9cb8a6ac38d7de
Sha1
001b194569773929260830ccdd0ecf4177709e1a
Sha256
757060d1a348f54c2fceeb3337e0e8b8a984d3f3001ffc27771dd49f559254e7
Sha384
e9025ed2e1edb2d3dff831e89442d13d716c924c904616c0ef282c5a02ca4784f35c3e98de215b805c355d77cb825745
Sha512
f69ed12187bb366a0e42ae90689fc8947e5af92c4df1f2f1545630b38c2463ecdd85e71fc2de4645c88f664bd4e7e83b63b48cfe6d367ce781fafc0ba599be26
SSDeep
49152:Qkwkn9IMSNYJEwXUHLpDoBqsTi2lwaPCS:rdnsQE9L9ZsTllvPC
TLSH
8E75E01367DE92A5C2725173BA55BB426E7FBD2805B1F09B2FD4093DEA20131821EB73
Detection
PeID
Microsoft Visual C++ 6.0 DLL (Debug)Microsoft Visual C++ 7.0 - 8.0Microsoft Visual C++ 8Microsoft Visual C++ 8Microsoft Visual C++ v6.0 DLLVC8 -> Microsoft Corporation
3 malicious · 23 files
A3Xaa361a2c34222dd96b9cb8a6ac38d7de
Structure
A3XautEB8.tmp.tok
A3X[Cleaned].au3
BINResources
BINRT_ICON
BINID:0001
BINID:2057
BINID:0002
IMGID:2057
IMGID:2057-preview.png
BINID:0003
BINID:2057
BINID:0004
BINID:2057
BINID:0005
BINID:2057
BINID:0006
BINID:2057
BINID:0007
BINID:2057
BINRT_STRING
BINID:0007
BINID:2057
BINID:0008
BINID:2057
BINID:0009
BINID:2057
BINID:000A
BINID:2057
BINID:000B
BINID:2057
BINID:000C
BINID:2057
BINID:0139
BINID:2057
BINRT_RCDATA
BINID:0000
A3XID:0
BINRT_GROUP_CURSOR4
BINID:0063
BINID:2057
BINID:00A9
BINID:2057
BINRT_VERSION
BINID:0001
BINID:2057
BINRT_MANIFEST
BINID:0001
BINID:2057
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
Structural branches: 4
STICH kept: 2secondary ignored: 2
bin
1img
1Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:exe>pe:autoit
Shape
pe:exe>pe:autoit
malicious
2 nodes
Path
pe:exe>pe:rsrc>pe:autoit
Shape
pe:exe>pe:rsrc>pe:autoit
3 nodes
3 malicious · 23 files
A3Xaa361a2c34222dd96b9cb8a6ac38d7de
Structure
A3XautEB8.tmp.tok
A3X[Cleaned].au3
BINResources
No malware configuration was found at this point.
Sign in or create a free account to view the matching YARA rules.
Create a free account