Malicious
Malicious

bdc5d7419f69b538a77b9397c5db01b6

Share on LinkedIn
Print
AutoIt Compiled Script
MD5: bdc5d7419f69b538a77b9397c5db01b6
Size: 1.77 MB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
File
Type
AutoIt Compiled Script
Size
1.77 MB · 1,768,448 B
First seen
2026-08-06 22:00 · 2 months ago
Last seen
2026-08-06 22:00 · 2 months ago
Last analysis
2026-08-06 22:01 · 2 months ago
Hashes
MD5 bdc5d7419f69b538a77b9397c5db01b6 Sha1 5cf2d0a673a924a77f30080307eefb3735abcf87 Sha256 89f5e86a2ca62dee4ea9ea65d2235efb36528f987ba4d136326612f79cfe89a9 Sha384 5c26f691563d3d448bc5e1c98842fbd60192be9dd4ae3c79699ceda554391b9462706d5a7cb9b6dad6a37a0fc544bffa Sha512 da42618d5e886c46b4176acb9c17380193477f7e1bb5c5b2f94cc13b762a7ed3d40b1c60682e143820748b6f0b414209210977cacbf5a3ea67be742ec59b141f SSDeep 49152:rO5IEUpkrtUiNxC/Wk7yHmNP2vAQUptJ:CaE6q/C/7eGNP8RUptJ TLSH 5D85235197E54063E8DAC7B4A4F04107BBB87C959F79829F2391A1AD0F67E90B23831F
Detection
PeID
Microsoft Visual C++ 8.0 (DLL)
4 malicious · 66 files
A3Xbdc5d7419f69b538a77b9397c5db01b6
Structure
A3XRobust.a3x
A3Xaut509B.tmp.tok
A3X[Cleaned].au3
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 7 STICH kept: 2secondary ignored: 5
bin 3img 2

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path pe:exe>pe:autoit>pe:autoit
Shape pe:exe>pe:autoit>pe:autoit
malicious 3 nodes
Path pe:exe>pe:rsrc>pe:autoit
Shape pe:exe>pe:rsrc>pe:autoit
3 nodes
Name Value
Info
PDB Path: wextract.pdb
An error has occurred. This application may no longer respond until reloaded. Reload 🗙