Suspect
2c5387d2e52d10b5679680bec8c2b060
PE Executable
MD5: 2c5387d2e52d10b5679680bec8c2b060
Size: 5.3 MB
application/x-dosexec
This sample is a 5.1 MB PE Executable for which Malva.RE's static analysis did not establish a malicious verdict. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 24d476813db9620e82d258b20f2d6987b39d54ec25403fe40e2da7b9965f1095
- MD5
- 2c5387d2e52d10b5679680bec8c2b060
- Verdict
- Inconclusive
- File type
- PE Executable · 5.1 MB
Cite this report: https://app.malva.re/sha256/24d476813db9620e82d258b20f2d6987b39d54ec25403fe40e2da7b9965f1095
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Portable Executable file
Size
5.3 MB · 5,298,176 B
First seen
2026-09-29 07:15 · 26 days ago
Last seen
2026-09-29 07:15 · 26 days ago
Last analysis
2026-09-29 07:15 · 26 days ago
Hashes
MD5
2c5387d2e52d10b5679680bec8c2b060
Sha1
61abdfe1b46b18307f202f97802deff394f82519
Sha256
24d476813db9620e82d258b20f2d6987b39d54ec25403fe40e2da7b9965f1095
Sha384
158c2a22d602b35e956d899b268b81d216315aea1cd0ac75287c3d8d40144d3cddd31821213ae9ad3d01bc642ec21df3
Sha512
1108493166a3b59598a296715038e76d11282841e5e7874d1b4a8bd3a9e9ea456de6afc5cfa19b11e4329d51b5fb69aec18452f2e38aedfca4deff7d3aa1c4e9
SSDeep
24576:jbLg3bLgddQhfdmMSirYbcMNgef0QeQ14kF2Y9g:jn2nAQqMSPbcBVQe2dw
TLSH
0036F11572E86675F6B31AB265B64B20973ABD165727962F1250020F0C33F88DEE3F2D
Detection
PeID
Microsoft Visual C++ 6.0 DLL (Debug)Microsoft Visual C++ v6.0 DLLMicrosoft v12.00 64bit C++ DLL - sign ASL ( 64 bit ) UPolyX 0.3 -> delikon
1 file
EXE2c5387d2e52d10b5679680bec8c2b060
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:dll
Shape
pe:dll
1 nodes
PE Layout
UNKNWOWNsuspect
Memoryhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential1 file
EXE2c5387d2e52d10b5679680bec8c2b060
No malware configuration was found at this point.
PE Layout
UNKNWOWNsuspect
Memoryhuhuhuhuhuhuhuhuhuhuhu
2c5387d2e52d10b5679680bec8c2b060
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account