Malicious
PE Executable
MD5: 2dd6fb2ebb18fcabbaa965ad360a28e1
Size: 121.86 KB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Portable Executable file
Size
121.86 KB · 121,856 B
First seen
2026-08-19 14:46 · 2 months ago
Last seen
2026-08-19 14:46 · 2 months ago
Last analysis
2026-09-03 21:05 · one month ago
Hashes
MD5
2dd6fb2ebb18fcabbaa965ad360a28e1
Sha1
098245040707258e0423d797a4f4942cc0e1790e
Sha256
3b38a321bf61af675fea9e5f14e2bd9d78be5d892a3b4f755212ce25f3701244
Sha384
39bcbf202c7469b6c0fd35f804aed5f599a772959cffc414c552ed913dd84dcfdc5b6391fabc1a6837ccd32a36d6ed2f
Sha512
6302b26b15e64c88f05c88c132043970e90e5036c9912f8f70216ccac548d75b6f51ed894b41ab6dd57e5cc4a5f91aac1b05485bcaf231b19a6c3a454caa402e
SSDeep
1536:ylGn2bPcs84IRFQiJPgGbd+pVUL5qhlh7CrFfkKZlnA2Nt9qrrIT9IeFVF6kkkkw:ylUoJ8pTpcpV6GVGRDNt9qoT9IeFVF
TLSH
51C38C22B660C032D1E6253D99B98B724A7F38319B7844CBB7941F3E5E603D1AF38356
Detection
PeID
MS Visual C++ v7.0 DLLMicrosoft Visual C++ 6.0 DLL (Debug)Microsoft Visual C++ v6.0 DLLVisual C++ 2003 DLL -> MicrosoftVisual C++ 2005 DLL -> Microsoft
1 malicious · 1 file
EXE2dd6fb2ebb18fcabbaa965ad360a28e1ValleyRat
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:dll
Shape
pe:dll
1 nodes
PE Layout
UNKNWOWNsuspect
Memoryhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential