Malicious
32f5f12dc1dc85423f2add8052adfeb6
PE Executable
MD5: 32f5f12dc1dc85423f2add8052adfeb6
Size: 116.22 KB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan
This sample is a 113.5 KB PE Executable identified by Malva.RE as ValleyRat (rat). Static analysis extracted 1 embedded or derived file. It matches 1 YARA rule. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 9a02a157acf5643e7ba6bcb422f093f7a681c184fcfa285c568e27803762dc49
- MD5
- 32f5f12dc1dc85423f2add8052adfeb6
- Verdict
- Malicious
- File type
- PE Executable · 113.5 KB
- Family
- ValleyRat
- Category
- RAT
Cite this report: https://app.malva.re/sha256/9a02a157acf5643e7ba6bcb422f093f7a681c184fcfa285c568e27803762dc49
Related ValleyRat samples
- c806290db9b11e7f25d6eddb9a47c8baadfd190f1d7cf48ddd8d31b4cd76bc14 2026-11-03
- 908b9d1268829e84bb1f10b6d6f37573049d248856a5d3902c7cf7389dfa48bc 2026-10-31
- 4421ccd153aa864e3eb4ac89044c92eba48a1ecca7efc759203368004a7ded05 2026-10-19
- a9c759ea8ea13df937b0d7dc7971aec13028f8953a26c620c2f6b7009fb9fea8 2026-10-03
- 1a64a2d29964a9c6797d59bc5628c3b3e2639ae7f1ed2778e97064f63f6119fb 2026-09-29
- 899f994ad277c633879683a8502002c1ca6a5e4db02b7eb233e552b502c1ea42 2026-09-21
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Size
116.22 KB · 116,224 B
First seen
2026-11-04 04:15 · an hour ago
Last seen
2026-11-04 04:15 · an hour ago
Last analysis
2026-11-04 04:15 · an hour ago
Hashes
MD5
32f5f12dc1dc85423f2add8052adfeb6
Sha1
8cede600c02e668807dd1afbd9ff46e67acd365f
Sha256
9a02a157acf5643e7ba6bcb422f093f7a681c184fcfa285c568e27803762dc49
Sha384
d1124ba981390a4c5d0c5e228cbc1e6d705753d75b47521068b30fe1b165a8a87153aa5e30307b243d1ebec6ad3d468a
Sha512
6d90af187929e85ded78bc8bcaa16d6f398e743bd81e159d84cd4a0d1f4e83c1584bbb6f9a207d75bae9998b3c2062e0f7da886b9cb46c71940ec864d85e65f1
SSDeep
1536:jvYYLIjW9fSwXyBSA8IrRySuNk/zOE6s7ifhqzJmHxEkBnJd+8iXESAitDU:0gI6pRo0SkkbOE6bUM1iXESAgDU
TLSH
6DB38D2172D0C876D4A3253198ADDBB14EBEF83117B849CBB3A80A7E0F743C15A79756
Detection
PeID
Microsoft Visual C++ 6.0 DLL (Debug)Microsoft Visual C++ 8Microsoft Visual C++ 8Microsoft Visual C++ v6.0 DLLVC8 -> Microsoft Corporation
1 malicious · 2 files
EXE32f5f12dc1dc85423f2add8052adfeb6ValleyRat
Structure
BINResources
BINRT_MANIFEST
BINID:0001
BINID:1033
STICH
beta
No STICH Path has been generated for this analysis yet.
1 structural branch were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.
bin
11 malicious · 2 files
EXE32f5f12dc1dc85423f2add8052adfeb6ValleyRat
Structure
BINResources
No malware configuration was found at this point.
Sign in or create a free account to view the matching YARA rules.
Create a free account