Malicious
2dd6fb2ebb18fcabbaa965ad360a28e1
PE Executable
MD5: 2dd6fb2ebb18fcabbaa965ad360a28e1
Size: 121.86 KB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Portable Executable file
Size
121.86 KB · 121,856 B
First seen
2026-08-19 14:46 · 2 months ago
Last seen
2026-08-19 14:46 · 2 months ago
Last analysis
2026-09-03 21:05 · one month ago
Hashes
MD5
2dd6fb2ebb18fcabbaa965ad360a28e1
Sha1
098245040707258e0423d797a4f4942cc0e1790e
Sha256
3b38a321bf61af675fea9e5f14e2bd9d78be5d892a3b4f755212ce25f3701244
Sha384
39bcbf202c7469b6c0fd35f804aed5f599a772959cffc414c552ed913dd84dcfdc5b6391fabc1a6837ccd32a36d6ed2f
Sha512
6302b26b15e64c88f05c88c132043970e90e5036c9912f8f70216ccac548d75b6f51ed894b41ab6dd57e5cc4a5f91aac1b05485bcaf231b19a6c3a454caa402e
SSDeep
1536:ylGn2bPcs84IRFQiJPgGbd+pVUL5qhlh7CrFfkKZlnA2Nt9qrrIT9IeFVF6kkkkw:ylUoJ8pTpcpV6GVGRDNt9qoT9IeFVF
TLSH
51C38C22B660C032D1E6253D99B98B724A7F38319B7844CBB7941F3E5E603D1AF38356
Detection
PeID
MS Visual C++ v7.0 DLLMicrosoft Visual C++ 6.0 DLL (Debug)Microsoft Visual C++ v6.0 DLLVisual C++ 2003 DLL -> MicrosoftVisual C++ 2005 DLL -> Microsoft
1 malicious · 1 file
EXE2dd6fb2ebb18fcabbaa965ad360a28e1ValleyRat
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:dll
Shape
pe:dll
1 nodes
PE Layout
UNKNWOWNsuspect
Memoryhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential1 malicious · 1 file
EXE2dd6fb2ebb18fcabbaa965ad360a28e1ValleyRat
No malware configuration was found at this point.
PE Layout
UNKNWOWNsuspect
Memoryhuhuhuhuhuhuhuhuhuhuhu
2dd6fb2ebb18fcabbaa965ad360a28e1
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account