Suspect
PE Executable
MD5: 2c5387d2e52d10b5679680bec8c2b060
Size: 5.3 MB
application/x-dosexec
This sample is a 5.1 MB PE Executable for which Malva.RE's static analysis did not establish a malicious verdict. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 24d476813db9620e82d258b20f2d6987b39d54ec25403fe40e2da7b9965f1095
- MD5
- 2c5387d2e52d10b5679680bec8c2b060
- Verdict
- Inconclusive
- File type
- PE Executable · 5.1 MB
Cite this report: https://app.malva.re/sha256/24d476813db9620e82d258b20f2d6987b39d54ec25403fe40e2da7b9965f1095
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Portable Executable file
Size
5.3 MB · 5,298,176 B
First seen
2026-09-29 07:15 · 26 days ago
Last seen
2026-09-29 07:15 · 26 days ago
Last analysis
2026-09-29 07:15 · 26 days ago
Hashes
MD5
2c5387d2e52d10b5679680bec8c2b060
Sha1
61abdfe1b46b18307f202f97802deff394f82519
Sha256
24d476813db9620e82d258b20f2d6987b39d54ec25403fe40e2da7b9965f1095
Sha384
158c2a22d602b35e956d899b268b81d216315aea1cd0ac75287c3d8d40144d3cddd31821213ae9ad3d01bc642ec21df3
Sha512
1108493166a3b59598a296715038e76d11282841e5e7874d1b4a8bd3a9e9ea456de6afc5cfa19b11e4329d51b5fb69aec18452f2e38aedfca4deff7d3aa1c4e9
SSDeep
24576:jbLg3bLgddQhfdmMSirYbcMNgef0QeQ14kF2Y9g:jn2nAQqMSPbcBVQe2dw
TLSH
0036F11572E86675F6B31AB265B64B20973ABD165727962F1250020F0C33F88DEE3F2D
Detection
PeID
Microsoft Visual C++ 6.0 DLL (Debug)Microsoft Visual C++ v6.0 DLLMicrosoft v12.00 64bit C++ DLL - sign ASL ( 64 bit ) UPolyX 0.3 -> delikon
1 file
EXE2c5387d2e52d10b5679680bec8c2b060
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:dll
Shape
pe:dll
1 nodes
PE Layout
UNKNWOWNsuspect
Memoryhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential