Malicious
AutoIt Compiled Script
MD5: cfc95149b7433840e6a64ff648a78575
Size: 8.39 MB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
AutoIt Compiled Script
Size
8.39 MB · 8,388,608 B
First seen
2026-08-15 07:02 · 2 months ago
Last seen
2026-08-15 07:02 · 2 months ago
Last analysis
2026-08-15 07:02 · 2 months ago
Hashes
MD5
cfc95149b7433840e6a64ff648a78575
Sha1
652cddd50fc79e027162b7502b7fff935aecf2b5
Sha256
580529f353d25341fb93ac3f616a58ad37ca8227866d0799e763191528878930
Sha384
c94f1382c4aa6724781846ed7ad33f16c4a1be738423bf375bc168978052961ef384214755f26ee0ff85db720a41fcad
Sha512
ebf7ad5553deedcd181b84c04967a590419f2a4f616baec248f50114b88d0aeed82911e278391fbdd2296592794bedee3fe2a9e32947c011b55f6f26306ef311
SSDeep
49152:4TUzqCLbVdjzhirlCx51kcWyyphQ6q1H:4TUzftdjzhirE/1kcApm6qh
TLSH
0C86232153DD4076D4BCAB7298F282966530FC8497B597EF22A4828E1F539C5F93133E
Detection
PeID
Microsoft Visual C++ 8.0 (DLL)Private EXE Protector V2.30-V2.3X -> SetiSoft Team
4 malicious · 68 files
A3Xcfc95149b7433840e6a64ff648a78575
Structure
BINResources
A3XBlogs.a3x
A3Xaut41A9.tmp.tok
A3X[Cleaned].au3
A3XAutoIt3.exe
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
Structural branches: 7
STICH kept: 1secondary ignored: 6
bin
4img
2Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:exe>pe:autoit>pe:autoit
Shape
pe:exe>pe:autoit>pe:autoit
malicious
3 nodes
| Name | Value |
|---|---|
| Info | PDB Path: wextract.pdb |
PE Layout
UNKNWOWNsuspect
Memoryhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential