Suspicious
Suspect

2e8101452461f1c164a55107a7979790

Disk Image
MD5: 2e8101452461f1c164a55107a7979790
Size: 921.6 KB

This sample is a 900 KB Disk Image for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 11 embedded or derived files. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
5a0602d8b681aa4426bc8e6d6a6b6f7586b9f1596b6ceccd1f4d1f8bfca0f5f5
MD5
2e8101452461f1c164a55107a7979790
Verdict
Inconclusive
File type
Disk Image · 900 KB

Cite this report: https://app.malva.re/sha256/5a0602d8b681aa4426bc8e6d6a6b6f7586b9f1596b6ceccd1f4d1f8bfca0f5f5

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
Disk image
Size
921.6 KB · 921,600 B
First seen
2026-10-21 05:45 · 7 days ago
Last seen
2026-10-21 05:45 · 7 days ago
Last analysis
2026-10-21 05:45 · 7 days ago
Hashes
MD5 2e8101452461f1c164a55107a7979790 Sha1 49b135cdc1ba94e527da971a08a1590e92675537 Sha256 5a0602d8b681aa4426bc8e6d6a6b6f7586b9f1596b6ceccd1f4d1f8bfca0f5f5 Sha384 e2f9b5ecacb166df939e43292a4f85679a7f8be00a78da8789dc987c999cb1c9390fe6de672c809363cece10eaa0b5fe Sha512 cbb56e193821cd2ae902c28d0c4e5e0fe3fa594ca0e78aa78ffaff8062adab7ef0e712a2ab28cf6868cf2f6cf22756a6ee8a1dedfd3c3e65e1d9a09104cdebc4 SSDeep 12288:Hl+qxTIy4PgMkXH6LH4DeJyaFOqVJBdPjukIj3+b4DXuJyVd:Hl+qVIyKgvu7YaFOqTBpj+CAuYV TLSH 7515D741E69B5FE4C82F6831209AB13E96271D088F25DBE3DB992D47F73A2D201B7507

12 files
ISO2e8101452461f1c164a55107a7979790
EXEReader_en_install.exe
Structure
BINOverlay_975ddf13.bin
BIN(folder)
BIN4
BINResources
BINRT_ICON
BINID:0001
IMGID:1033
IMGID:1033-preview.png
BINID:0002
BINID:1033
BINID:0003
BINID:1033
BINID:0004
BINID:1033
BINID:0005
BINID:1033
BINID:0006
BINID:1033
BINRT_GROUP_CURSOR4
BINID:0001
BINID:1033
DLLmsi.dll
Structure
BIN(folder)
BIN4
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 4 STICH kept: 1secondary ignored: 3
bin 2img 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path img:disk>pe:dll
Shape img:disk>pe:dll
2 nodes

12 files
ISO2e8101452461f1c164a55107a7979790
No malware configuration was found at this point.
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙