Malicious
089537b55937883887885657e414735a
PE Executable
MD5: 089537b55937883887885657e414735a
Size: 242.18 KB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan
This sample is a 236.5 KB PE Executable identified by Malva.RE as ValleyRat (rat). Static analysis extracted 1 embedded or derived file. It matches 1 YARA rule. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- c806290db9b11e7f25d6eddb9a47c8baadfd190f1d7cf48ddd8d31b4cd76bc14
- MD5
- 089537b55937883887885657e414735a
- Verdict
- Malicious
- File type
- PE Executable · 236.5 KB
- Family
- ValleyRat
- Category
- RAT
Cite this report: https://app.malva.re/sha256/c806290db9b11e7f25d6eddb9a47c8baadfd190f1d7cf48ddd8d31b4cd76bc14
Related ValleyRat samples
- 908b9d1268829e84bb1f10b6d6f37573049d248856a5d3902c7cf7389dfa48bc 2026-10-31
- 4421ccd153aa864e3eb4ac89044c92eba48a1ecca7efc759203368004a7ded05 2026-10-19
- a9c759ea8ea13df937b0d7dc7971aec13028f8953a26c620c2f6b7009fb9fea8 2026-10-03
- 1a64a2d29964a9c6797d59bc5628c3b3e2639ae7f1ed2778e97064f63f6119fb 2026-09-29
- 899f994ad277c633879683a8502002c1ca6a5e4db02b7eb233e552b502c1ea42 2026-09-21
- 08f2c963906b126c0a10b47aa28eccebf8e209f3885c54489f771e948dc89b1a 2026-09-14
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Size
242.18 KB · 242,176 B
First seen
2026-11-03 15:00 · 3 hours ago
Last seen
2026-11-03 15:00 · 3 hours ago
Last analysis
2026-11-03 15:00 · 3 hours ago
Hashes
MD5
089537b55937883887885657e414735a
Sha1
d903d09c594e5c0a85550c19945d6e40336d8b11
Sha256
c806290db9b11e7f25d6eddb9a47c8baadfd190f1d7cf48ddd8d31b4cd76bc14
Sha384
9c43e52c2ee8df9a70fdd92de0a4f2dc2c8669f9e43a7a8e0a06c6a7dac41cf7e21e88a58c88eeafefce25fd91aef134
Sha512
9b2c69c01dffae1bedf796b8b21eb5def14ab4ffa8bf4adde8df81c996145e3152ae182c8b9dae39cbb350e6b4e69bf75f09e0ded09f16a428252ab37065d7d1
SSDeep
6144:jhduNzMQPq8vDo84HvUevPsumCxAsZrPk2KP:N4NzrPqPlUevPpmCOsN
TLSH
47348C217981C536E6DE113899BBDF76496DB8310B24D1CFABD48E3D0E617E1AA3430B
Detection
PeID
MS Visual C++ v7.0 DLLMicrosoft Visual C++ 6.0 DLL (Debug)Microsoft Visual C++ 7.0 - 8.0Microsoft Visual C++ v6.0 DLLPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamVisual C++ 2003 DLL -> MicrosoftVisual C++ 2005 DLL -> Microsoft
1 malicious · 2 files
EXE089537b55937883887885657e414735aValleyRat
Structure
BINResources
BINRT_MANIFEST
BINID:0002
BINID:1033
STICH
beta
No STICH Path has been generated for this analysis yet.
1 structural branch were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.
bin
11 malicious · 2 files
EXE089537b55937883887885657e414735aValleyRat
Structure
BINResources
No malware configuration was found at this point.
Sign in or create a free account to view the matching YARA rules.
Create a free account