Malicious AutoIt Compiled Script analysis – 16b42c88cc71

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

File

Type

AutoIt Compiled Script

Size

1.53 MB · 1,533,368 B

First seen

2026-07-21 17:01 · 3 months ago

Last seen

2026-07-21 17:01 · 3 months ago

Last analysis

2026-07-22 00:09 · 3 months ago

Hashes

MD5 eabf6402df0612bd1fbf4106e528a1ef Sha1 fa3a38a6a0e054afa12506233e6add629b09fe5b Sha256 16b42c88cc7140522e273071df1eb98f02850d6a69a4ffbe20b7cd388063ab16 Sha384 b391f295264d0a246b1fbf1ee3b591d1c291c60b5b3ad8c67ea7ae664a54cdedbdcf84ddb32fbac352a62e103fa47bfa Sha512 1155915cc33ea852a52186097dd3822e89f2a3ec41b2c3e9c57837c3a82e70ddee92227e006bd60e91089f7907b99d364af497c698cb406f1e7ca3f517de9574 SSDeep 24576:wrsRcbYKNp03n4gZWmA7OABU5CpU8xPhuyHyCH+8xc9jeYu+gXTk0kyI:wrsabNNp03FWmA7O95iUUPwULH+8Ff+H TLSH 7B6523956BD000AAD87BA3B89AF322536775BCC517F4D3CF624082A92E339C4717B746

Detection

PeID

Microsoft Visual C++ 8.0 (DLL)UPolyX 0.3 -> delikon

4 malicious · 60 files

A3Xeabf6402df0612bd1fbf4106e528a1ef

Structure

P7B[Authenticode]_ab07b8ba.p7b

BINResources

A3XSimpsons.a3x

A3Xaut810E.tmp.tok

A3X[Cleaned].au3

EXEAutoIt3.exe

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 7 STICH kept: 1secondary ignored: 6

bin 5img 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:exe>pe:autoit>pe:autoit

Shape pe:exe>pe:autoit>pe:autoit

malicious 3 nodes

Name	Value
Info	Authenticode present at 0x173C00 size 10680 bytes
Info	PDB Path: wextract.pdb