Suspect
PE Executable
MD5: 2d57778fc4428022da349a6bbd5bb720
Size: 5.3 MB
application/x-dosexec
This sample is a 5.1 MB PE Executable for which Malva.RE's static analysis did not establish a malicious verdict. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- ccedb14d2f41bce238a40dc24127b32e2ffbbb332da1c8ff579ad1094e60fff3
- MD5
- 2d57778fc4428022da349a6bbd5bb720
- Verdict
- Inconclusive
- File type
- PE Executable · 5.1 MB
Cite this report: https://app.malva.re/sha256/ccedb14d2f41bce238a40dc24127b32e2ffbbb332da1c8ff579ad1094e60fff3
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Portable Executable file
Size
5.3 MB · 5,298,176 B
First seen
2026-10-29 19:15 · 2 days ago
Last seen
2026-10-29 19:15 · 2 days ago
Last analysis
2026-10-29 19:15 · 2 days ago
Hashes
MD5
2d57778fc4428022da349a6bbd5bb720
Sha1
9dec99a38e1436ef2e069965efd6ee1710b78c95
Sha256
ccedb14d2f41bce238a40dc24127b32e2ffbbb332da1c8ff579ad1094e60fff3
Sha384
1a9f8168eb975af8d18b65fb6c69af5876bd43792cb407b290b1ca8e72b0079a4c107959f3df548bc84e6bbf9428aaff
Sha512
4fc7b71aa2ebd4e2340b686e534dccfc2d3f837b17b533a0a80d3c108a8c941677f4802e82692188f611607bf09b03e360db6c1a91d7591f13c4ad5080955318
SSDeep
98304:DhDqPoBhz1aRxcSUDk36SAEdhvxWa9P593vHnD527BWG:DhDqPe1Cxcxk3ZAEUadzvHnVQBWG
TLSH
B236335C626C91FCE04209B840F3CE1AF6733C5567BE5A0F5B8486BB1D63B8A9F94712
Detection
PeID
Microsoft Visual C++ 6.0 DLL (Debug)Microsoft Visual C++ v6.0 DLLMicrosoft v12.00 64bit C++ DLL - sign ASL ( 64 bit ) UPolyX 0.3 -> delikon
1 file
EXE2d57778fc4428022da349a6bbd5bb720
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:dll
Shape
pe:dll
1 nodes
PE Layout
UNKNWOWNsuspect
Memoryhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential