Suspect
2d57778fc4428022da349a6bbd5bb720
PE Executable
MD5: 2d57778fc4428022da349a6bbd5bb720
Size: 5.3 MB
application/x-dosexec
This sample is a 5.1 MB PE Executable for which Malva.RE's static analysis did not establish a malicious verdict. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- ccedb14d2f41bce238a40dc24127b32e2ffbbb332da1c8ff579ad1094e60fff3
- MD5
- 2d57778fc4428022da349a6bbd5bb720
- Verdict
- Inconclusive
- File type
- PE Executable · 5.1 MB
Cite this report: https://app.malva.re/sha256/ccedb14d2f41bce238a40dc24127b32e2ffbbb332da1c8ff579ad1094e60fff3
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Portable Executable file
Size
5.3 MB · 5,298,176 B
First seen
2026-10-29 19:15 · 2 days ago
Last seen
2026-10-29 19:15 · 2 days ago
Last analysis
2026-10-29 19:15 · 2 days ago
Hashes
MD5
2d57778fc4428022da349a6bbd5bb720
Sha1
9dec99a38e1436ef2e069965efd6ee1710b78c95
Sha256
ccedb14d2f41bce238a40dc24127b32e2ffbbb332da1c8ff579ad1094e60fff3
Sha384
1a9f8168eb975af8d18b65fb6c69af5876bd43792cb407b290b1ca8e72b0079a4c107959f3df548bc84e6bbf9428aaff
Sha512
4fc7b71aa2ebd4e2340b686e534dccfc2d3f837b17b533a0a80d3c108a8c941677f4802e82692188f611607bf09b03e360db6c1a91d7591f13c4ad5080955318
SSDeep
98304:DhDqPoBhz1aRxcSUDk36SAEdhvxWa9P593vHnD527BWG:DhDqPe1Cxcxk3ZAEUadzvHnVQBWG
TLSH
B236335C626C91FCE04209B840F3CE1AF6733C5567BE5A0F5B8486BB1D63B8A9F94712
Detection
PeID
Microsoft Visual C++ 6.0 DLL (Debug)Microsoft Visual C++ v6.0 DLLMicrosoft v12.00 64bit C++ DLL - sign ASL ( 64 bit ) UPolyX 0.3 -> delikon
1 file
EXE2d57778fc4428022da349a6bbd5bb720
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:dll
Shape
pe:dll
1 nodes
PE Layout
UNKNWOWNsuspect
Memoryhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential1 file
EXE2d57778fc4428022da349a6bbd5bb720
No malware configuration was found at this point.
PE Layout
UNKNWOWNsuspect
Memoryhuhuhuhuhuhuhuhuhuhuhu
2d57778fc4428022da349a6bbd5bb720
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account