Suspicious
Suspect

27371b0d504f1df1e9ba9a11aa31c295

Share on LinkedIn
Print
MD5: 27371b0d504f1df1e9ba9a11aa31c295
Size: 348.33 KB

This sample is a 340.2 KB file for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 24 embedded or derived files. It matches 1 YARA rule. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
cc73561480591baee4c47ce8b44cf37e22a326f9f2ccb8cce224407fcb0c0044
MD5
27371b0d504f1df1e9ba9a11aa31c295
Verdict
Inconclusive
File type
file · 340.2 KB

Cite this report: https://app.malva.re/sha256/cc73561480591baee4c47ce8b44cf37e22a326f9f2ccb8cce224407fcb0c0044

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
Portable Executable file
Size
348.33 KB · 348,328 B
First seen
2026-09-25 06:45 · one month ago
Last seen
2026-09-25 06:45 · one month ago
Last analysis
2026-09-25 06:45 · one month ago
Hashes
MD5 27371b0d504f1df1e9ba9a11aa31c295 Sha1 4ce03eb543a34b1a6b054d3af50a854d546edd44 Sha256 cc73561480591baee4c47ce8b44cf37e22a326f9f2ccb8cce224407fcb0c0044 Sha384 47aa9fb1a1e3e8e0120641b731a887ac32be457c8dadd188b6064dae9b45a0d2cbd3928c0487acbad50cea2dcc4cfa64 Sha512 14ece9734fb77fa84f5ec4bee06067b6adb816b89750da1f19846b1067a58b91798469f83cf3a57e704816a4ea6d80a1c6db0e1ec6078b7b45f32e556dc360ce SSDeep 6144:3lHXqz8aiN+uDASPJ3BvcKrqNHXJ5gV6lusERe3:sz8p+uDASRRcOqBZ6wfEI3 TLSH C074D052BA40CAF3CC25853184BB9A75AB79EDB59E556A0333C8B72D3CF3642C60B714
Detection
PeID
Installer Nullsoft PiMP Stub v.3.0.x - A.S.L Microsoft Visual C++ v6.0 DLL

25 files
NSIS27371b0d504f1df1e9ba9a11aa31c295
Structure
P7B[Authenticode]_d8eb3c44.p7b
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 4 STICH kept: 1secondary ignored: 3
bin 3

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path pe:exe>pe:dll
Shape pe:exe>pe:dll
2 nodes

Name Value
Info
Authenticode present at 0x54758 size 2384 bytes

An error has occurred. This application may no longer respond until reloaded. Reload 🗙