Malicious
Malicious

d45dc255d9d01adb6756c104e989d6d9

Share on LinkedIn
Print
AutoIt Compiled Script
MD5: d45dc255d9d01adb6756c104e989d6d9
Size: 2.01 MB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
File
Type
AutoIt Compiled Script
Size
2.01 MB · 2,008,576 B
First seen
2026-09-01 01:45 · one month ago
Last seen
2026-09-01 01:45 · one month ago
Last analysis
2026-09-01 01:46 · one month ago
Hashes
MD5 d45dc255d9d01adb6756c104e989d6d9 Sha1 72ad987d04733238978c5b6eb9bf704f628969be Sha256 b646d2987f0f0a0c7416eb4f6c5edf2f7faa088bbc57877cc48e8a463d497739 Sha384 0d690d81db39d25d32f773c0caadfdcc6be46e202f351c24108aa2752c09a03fc708125ec5d4e77d850f9a4fa1a77581 Sha512 483e382860ae1a3d685dfcaa2b2d0a0de8647a41497104bfd4c4cf2f12b067f0a6f411c72bb8badc692185ee6acb425840ac0ba42132ef6415205ce1a8e235b9 SSDeep 49152:yZ2AwyOX+f0ViW2STOdD8n0ywQEiaCQn7HDzunKo:bE0+TglKiaCQnTen TLSH AD95231167F4C0BAD4E74F7189F40613F331BDD11B3097CF2AA5A98A1B22F98A63535A
Detection
PeID
Microsoft Visual C++ 8.0 (DLL)
4 malicious · 66 files
A3Xd45dc255d9d01adb6756c104e989d6d9
Structure
A3XError.a3x
A3Xaut2F6.tmp.tok
A3X[Cleaned].au3
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 7 STICH kept: 2secondary ignored: 5
bin 3img 2

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path pe:exe>pe:autoit>pe:autoit
Shape pe:exe>pe:autoit>pe:autoit
malicious 3 nodes
Path pe:exe>pe:rsrc>pe:autoit
Shape pe:exe>pe:rsrc>pe:autoit
3 nodes
Name Value
Info
PDB Path: wextract.pdb
An error has occurred. This application may no longer respond until reloaded. Reload 🗙