62041f1c3ddb1d708abd4364665d4591941c5af779[...]cb3

AutoIt Compiled Script

MD5: f6ac6f09f7ea252953990d5499bf68ad

Size: 2.83 MB

application/x-dosexec

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

File

Type

AutoIt Compiled Script

Size

2.83 MB · 2,831,372 B

First seen

2026-08-18 17:38 · 2 months ago

Last seen

2026-08-18 17:38 · 2 months ago

Last analysis

2026-08-18 18:13 · 2 months ago

Hashes

MD5 f6ac6f09f7ea252953990d5499bf68ad Sha1 ff713638832849067a5c43c1ec78b0efe9802717 Sha256 62041f1c3ddb1d708abd4364665d4591941c5af7797165a43cca34a3e0cf8cb3 Sha384 6f1eb47ff1a7b5e18b0b8474f82a2f07ef864abe729ab3aec117b8c0084992f099717540aedbc5fa34c8d361d109a882 Sha512 f59a9304be70de250eb878502d081a2d68da3b6b1cdbe51fc2c747d0334ef852de56d958ee797b678f146af7d6b5a2ba1766dcf74056eee503d25286a616fc7f SSDeep 49152:AM3RMn+CnxLFaozPp4NE88c2TL8HoBW0VOnNfo4hDc+J+Hl1KH0PHQ2R4avMT:HBAnxLFzPp4NE88c2TgHyb0NzhDcyKUV TLSH 31D5E102F7818062FFB39277CA6EF23557BC7D2D42238A6F12982C797D341B2565D262

Detection

PeID

Microsoft Visual C++ 6.0 DLL (Debug)Microsoft Visual C++ 7.0 - 8.0Microsoft Visual C++ 8Microsoft Visual C++ 8Microsoft Visual C++ v6.0 DLLVC8 -> Microsoft Corporation

2 malicious · 113 files

A3X62041f1c3ddb1d708abd4364665d4591941c5af7797165a43cca34a3e0cf8cb3

Structure

A3XautF43A.tmp.tok

BINOverlay_8d8bec38.bin

BINResources

BINRT_ICON

BINID:0001

BINID:2057

BINID:0002

BINID:2057

BINID:0003

BINID:2057

BINID:0004

BINID:2057

BINID:0005

BINID:2057

BINID:0006

BINID:2057

BINID:0007

BINID:2057

BINID:0008

BINID:2057

BINID:0009

BINID:2057

BINRT_MENU

BINID:00A6

BINID:2057

BINRT_STRING

BINID:0007

BINID:2057

BINID:0008

BINID:2057

BINID:0009

BINID:2057

BINID:000A

BINID:2057

BINID:000B

BINID:2057

BINID:000C

BINID:2057

BINID:0139

BINID:2057

BINRT_RCDATA

BINID:0000

ZIPID:0

BINOtherSounds

MP3DisablePause_Info.mp3

MP3DisablePause_scope.mp3

MP3DisablePause_weapon.mp3

MP3load.mp3

MP3off.mp3

MP3on.mp3

BINPictures

IMGAKM.png

IMGAKM.png-preview.png

IMGAUG.png

IMGAUG.png-preview.png

IMGDP28.png

IMGDP28.png-preview.png

IMGGROZA.png

IMGGROZA.png-preview.png

IMGM16A4.png

IMGM16A4.png-preview.png

IMGM249.png

IMGM249.png-preview.png

IMGM416.png

IMGM416.png-preview.png

IMGM762.png

IMGM762.png-preview.png

IMGMICROUZI.png

IMGMICROUZI.png-preview.png

IMGMINI14.png

IMGMINI14.png-preview.png

IMGMK14.png

IMGMK14.png-preview.png

IMGnone.png

IMGnone.png-preview.png

IMGQBU.png

IMGQBU.png-preview.png

IMGQBZ.png

IMGQBZ.png-preview.png

IMGRDS.png

IMGRDS.png-preview.png

IMGSCARL.png

IMGSCARL.png-preview.png

IMGSKS.png

IMGSKS.png-preview.png

IMGSLR.png

IMGSLR.png-preview.png

IMGTOMMYGUN.png

IMGTOMMYGUN.png-preview.png

IMGUMP9.png

IMGUMP9.png-preview.png

IMGVECTOR.png

IMGVECTOR.png-preview.png

IMGVSS.png

IMGVSS.png-preview.png

IMGX2.png

IMGX2.png-preview.png

IMGX3.png

IMGX3.png-preview.png

IMGX4.png

IMGX4.png-preview.png

IMGX6.png

IMGX6.png-preview.png

IMGX8.png

IMGX8.png-preview.png

BINscopes

MP3RDS.mp3

MP3x2.mp3

MP3x3.mp3

MP3x4.mp3

MP3x6.mp3

MP3x8.mp3

BINweapons

MP3AKM.mp3

MP3AUG.mp3

MP3DP28.mp3

MP3Groza.mp3

MP3M16A4.mp3

MP3M249.mp3

MP3M416.mp3

MP3M762.mp3

MP3MICROUZI.mp3

MP3MINI14.mp3

MP3MK14.mp3

MP3QBU.mp3

MP3QBZ.mp3

MP3SCARL.mp3

MP3SKS.mp3

MP3SLR.mp3

MP3TOMMYGUN.mp3

MP3UMP9.mp3

MP3VECTOR.mp3

MP3VSS.mp3

BINRT_GROUP_CURSOR4

BINID:0063

BINID:2057

BINID:00A2

BINID:2057

BINID:00A4

BINID:2057

BINID:00A9

BINID:2057

BINRT_VERSION

BINID:0001

BINID:2057

BINRT_MANIFEST

BINID:0001

BINID:2057

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 6 STICH kept: 2secondary ignored: 4

bin 3img 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:exe>pe:autoit

Shape pe:exe>pe:autoit

malicious 2 nodes

Path pe:exe>pe:rsrc>pe:autoit

Shape pe:exe>pe:rsrc>pe:autoit

3 nodes

Name	Value
Info	Overlay extracted: Overlay_8d8bec38.bin (66264 bytes)
Info	PDB Path: ????

2 malicious · 113 files

A3X62041f1c3ddb1d708abd4364665d4591941c5af7797165a43cca34a3e0cf8cb3

Structure

A3XautF43A.tmp.tok

BINOverlay_8d8bec38.bin

BINResources

No malware configuration was found at this point.