Malicious
2df08b445585f5db43736868b4bc8428
PE Executable
MD5: 2df08b445585f5db43736868b4bc8428
Size: 1.31 MB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan
This sample is a 1.2 MB PE Executable identified by Malva.RE as ValleyRat (rat). Static analysis extracted 1 embedded or derived file. It matches 1 YARA rule. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 08f2c963906b126c0a10b47aa28eccebf8e209f3885c54489f771e948dc89b1a
- MD5
- 2df08b445585f5db43736868b4bc8428
- Verdict
- Malicious
- File type
- PE Executable · 1.2 MB
- Family
- ValleyRat
- Category
- RAT
Cite this report: https://app.malva.re/sha256/08f2c963906b126c0a10b47aa28eccebf8e209f3885c54489f771e948dc89b1a
Related ValleyRat samples
- c806290db9b11e7f25d6eddb9a47c8baadfd190f1d7cf48ddd8d31b4cd76bc14 2026-11-03
- 908b9d1268829e84bb1f10b6d6f37573049d248856a5d3902c7cf7389dfa48bc 2026-10-31
- 4421ccd153aa864e3eb4ac89044c92eba48a1ecca7efc759203368004a7ded05 2026-10-19
- a9c759ea8ea13df937b0d7dc7971aec13028f8953a26c620c2f6b7009fb9fea8 2026-10-03
- 1a64a2d29964a9c6797d59bc5628c3b3e2639ae7f1ed2778e97064f63f6119fb 2026-09-29
- 899f994ad277c633879683a8502002c1ca6a5e4db02b7eb233e552b502c1ea42 2026-09-21
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Portable Executable file
Size
1.31 MB · 1,309,696 B
Hashes
MD5
2df08b445585f5db43736868b4bc8428
Sha1
053f9c64a94448d467f0ca20e0ee5346c2f7a308
Sha256
08f2c963906b126c0a10b47aa28eccebf8e209f3885c54489f771e948dc89b1a
Sha384
1ec023e157d15c8f578a7fe73dc3b9720da5b2f3f5e94ad40fd7faa3d808c05ce0e3891cf67312ca1e90d9bf8670b38f
Sha512
16aa3cf097282a1c7ba8ec24e4aae23bc2692d97d8b6bfa34c7e612cff353bfb82c62b525a63c75abfac1db5bbb7c1298337a13ca009afd85493ade182a4b067
SSDeep
12288:/QKreuMBX0bLaL0DudXezE09Si/ckGHt6pshsPSGkYl2XIQCb+Lk1TWbPXQnAN5L:/hQULZgXe4i7ojhsP5Lgrk1TWb4AN5
TLSH
E655123136D0C0B3D147227884F1CBB29EAABCB2076549DB67D02B7B1F745D29B7825A
Detection
PeID
Microsoft Visual C++ 6.0 DLL (Debug)Microsoft Visual C++ 8Microsoft Visual C++ v6.0 DLLVC8 -> Microsoft Corporation
1 malicious · 2 files
EXE2df08b445585f5db43736868b4bc8428ValleyRat
Structure
BINResources
BINRT_MANIFEST
BINID:0001
BINID:1033
STICH
beta
No STICH Path has been generated for this analysis yet.
1 structural branch were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.
bin
11 malicious · 2 files
EXE2df08b445585f5db43736868b4bc8428ValleyRat
Structure
BINResources
No malware configuration was found at this point.
Sign in or create a free account to view the matching YARA rules.
Create a free account