> Family · unclassified-autoit-compiled_

~/packetpursuit $ cat /intel/families/unclassified-autoit-compiled.md

typeentityfamilyunclassified-autoit-compiledconfidencemediumcreated2026-08-19updated2026-08-19autoitinfostealercompiled

unclassified-autoit-compiled

Placeholder for AutoIt-compiled infostealer cluster. OpenCTI label depumped historically resolves to this family. Not a Go binary; distinct from the acrstealer and lummastealer Go clusters.

Capabilities

  • autoit-compiled-dropper
  • script-execution-via-autoit3.exe