Malicious
Malicious

e22822d6ea69264d894c7ec1712f20a9

Share on LinkedIn
Print
AutoIt Compiled Script
MD5: e22822d6ea69264d894c7ec1712f20a9
Size: 2.47 MB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
File
Type
AutoIt Compiled Script
Size
2.47 MB · 2,468,352 B
First seen
2026-07-17 00:01 · 3 months ago
Last seen
2026-07-17 00:01 · 3 months ago
Last analysis
2026-07-17 07:41 · 3 months ago
Hashes
MD5 e22822d6ea69264d894c7ec1712f20a9 Sha1 3a79fb25c10e47fd50de748f1525a6123a817c85 Sha256 317343a58620066fe067f7729b65d0afee20b114c3d4565e89257a409ee9fd27 Sha384 ad6aaeb8e97b3bc7f91fbebf990c5826e2e57f76e68a0e592b73243585d75a055c684c39ae2709c3946e0f739e403b2e Sha512 e5e7733d8535bd00a37b48b7afde38c3223022a47634024c69528e5b4bac2c2c8423007d1d1ff52408ea3e438e15414883f2011b69e74aea541f80d1e49d9198 SSDeep 49152:qIMf275Mquh/aRIjJbTUUMjrHMAnYjGJEQhvF96Ip6Nqh4W:BMf4OMC5UBTMAnued9Zp6Nq TLSH 4BB5331367DA8134DA296BB544A24607003ABCE39F99679771B1B4CB22B3DF4E17072F
Detection
PeID
Microsoft Visual C++ 8
4 malicious · 66 files
A3Xe22822d6ea69264d894c7ec1712f20a9
Structure
A3XFix.a3x
A3XautD7DE.tmp.tok
A3X[Cleaned].au3
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 7 STICH kept: 2secondary ignored: 5
bin 3img 2

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path pe:exe>pe:autoit>pe:autoit
Shape pe:exe>pe:autoit>pe:autoit
malicious 3 nodes
Path pe:exe>pe:rsrc>pe:autoit
Shape pe:exe>pe:rsrc>pe:autoit
3 nodes
Name Value
Info
PDB Path: wextract.pdb
An error has occurred. This application may no longer respond until reloaded. Reload 🗙