Malicious
AutoIt Compiled Script
MD5: cce96617ed0761b937f6ea6eede7d288
Size: 1.76 MB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
AutoIt Compiled Script
Size
1.76 MB · 1,757,696 B
First seen
2026-07-20 13:01 · 3 months ago
Last seen
2026-07-20 13:01 · 3 months ago
Last analysis
2026-07-20 16:53 · 3 months ago
Hashes
MD5
cce96617ed0761b937f6ea6eede7d288
Sha1
2d65ad2c3c092158c678e9552735f0656c9d91c1
Sha256
4498c5d7ac8b2f170330c11d33e8bf28a9879964159ffc711009fd4fe902f77b
Sha384
4343e7c8d4f8480808604bc306394ab523d36fd031193e014bbfdefaba2c324ab5ae01200a0180ada186055b39c73cff
Sha512
8bc5f52d5e31b153948003980baa63d84e388d430db6357cfc4567a5d27603439fdf1259a18cc3c0817197f0c226d61fb43d9df89eb5f0f8f6b7b24b9f5e1e7f
SSDeep
49152:DkfovDwaxCH/WmLWoi3xS0TASv9hiXScH:/Eu34crv9YSc
TLSH
C1852353A3E88567F6A6377CA9F12323B2793C901B7393DF5A402A9C29337C65531722
Detection
PeID
Microsoft Visual C++ 8.0 (DLL)
4 malicious · 65 files
A3Xcce96617ed0761b937f6ea6eede7d288
Structure
BINResources
A3XGreece.a3x
A3Xaut659F.tmp.tok
A3X[Cleaned].au3
EXEAutoIt3.exe
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
Structural branches: 7
STICH kept: 1secondary ignored: 6
bin
4img
2Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:exe>pe:autoit>pe:autoit
Shape
pe:exe>pe:autoit>pe:autoit
malicious
3 nodes
| Name | Value |
|---|---|
| Info | PDB Path: wextract.pdb |
PE Layout
UNKNWOWNsuspect
Memoryhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential