Malicious
AutoIt Compiled Script
MD5: ff8602e5e0b0e089b8db3a2bd9c6c661
Size: 1.95 MB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
AutoIt Compiled Script
Size
1.95 MB · 1,946,624 B
First seen
2026-08-25 19:45 · 2 months ago
Last seen
2026-08-25 19:45 · 2 months ago
Last analysis
2026-08-25 19:46 · 2 months ago
Hashes
MD5
ff8602e5e0b0e089b8db3a2bd9c6c661
Sha1
f4aa555c53582213b4788dae27d22ef051448f6e
Sha256
736dedb3dc80fc3c7e584666082ff8ff9673a4356f5d88f85165792086e93c1d
Sha384
6e8eb30cbb41fec7d852203d15310ce75ff35ee29dea23a4ceb79f06f890cc3ab09a3855e15229c1ec0ac4d75e8ff308
Sha512
6da3da4dc8cb59291acdd171d2eae3cd17a794e422e263be79a881516b0cfa9f13ad996355b3178ec33bbac88e787474854b32144f7550b780bf1146966af9c3
SSDeep
49152:4r9vkAljug+OfPupvngEeqgB5l0t26wWEGGyl:A8s6gpWpvn9M2pE3y
TLSH
729523312BE05616F87E9334EAF7442B4A7071A28B7D43CF7294A8591E72BDAC235713
Detection
PeID
Microsoft Visual C++ 8.0 (DLL)
4 malicious · 66 files
A3Xff8602e5e0b0e089b8db3a2bd9c6c661
Structure
BINResources
A3XBoot.a3x
A3Xaut693C.tmp.tok
A3X[Cleaned].au3
EXEAutoIt3.exe
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
Structural branches: 7
STICH kept: 2secondary ignored: 5
bin
3img
2Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:exe>pe:autoit>pe:autoit
Shape
pe:exe>pe:autoit>pe:autoit
malicious
3 nodes
Path
pe:exe>pe:rsrc>pe:autoit
Shape
pe:exe>pe:rsrc>pe:autoit
3 nodes
| Name | Value |
|---|---|
| Info | PDB Path: wextract.pdb |