Malicious
AutoIt Compiled Script
MD5: c63d52054c33f46ec855c166eeed30f8
Size: 1.77 MB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
AutoIt Compiled Script
Size
1.77 MB · 1,767,936 B
First seen
2026-08-18 09:01 · 2 months ago
Last seen
2026-08-18 09:01 · 2 months ago
Last analysis
2026-08-18 09:02 · 2 months ago
Hashes
MD5
c63d52054c33f46ec855c166eeed30f8
Sha1
4966c56c92429c0e11b67e30799cd5618e6fd94a
Sha256
a2797646777e379eb72fdd6f81ed1988216e191d7cee04e5b022d77d796886ea
Sha384
ab2856adf5ad209937f880a1cbcd3fde2cc833b7eed1f62c190ea393c82cf83c2e707cb29595e480b21a4a2948e1fd8d
Sha512
57747c4ce68641e59d2f33f74de6b6d408cdb120955c91c059d236adf2aa0d3b5017296a8ec5b9fce0011fd65cd9a165e40b2e8554c8748bb359e6575c33c7a9
SSDeep
49152:jsQi8s7goiIWd8kWTq4QDa1PRl6D18joSkyV23f:jsF8bDdB48qPRC18jxKf
TLSH
9A85234363E286E5F4B26B74A8F641939B337D825A77C58F1290FAD90F76085E630B13
Detection
PeID
Microsoft Visual C++ 8.0 (DLL)Microsoft Visual C++ v6.0 DLL
4 malicious · 68 files
A3Xc63d52054c33f46ec855c166eeed30f8
Structure
BINResources
A3XEcuador.a3x
A3XautE20D.tmp.tok
A3X[Cleaned].au3
A3XAutoIt3.exe
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
Structural branches: 7
STICH kept: 1secondary ignored: 6
bin
4img
2Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:exe>pe:autoit>pe:autoit
Shape
pe:exe>pe:autoit>pe:autoit
malicious
3 nodes
| Name | Value |
|---|---|
| Info | PDB Path: wextract.pdb |
PE Layout
UNKNWOWNsuspect
Memoryhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential