Suspect
PE Executable
MD5: 3fb5dc247a10522712c342871c58a143
Size: 2.97 MB
application/x-dosexec
This sample is a 2.8 MB PE Executable for which Malva.RE's static analysis did not establish a malicious verdict. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- ebfd170776d67428de1053ae6c92a6dee25614c8ec61f488b6f5228b58bbe003
- MD5
- 3fb5dc247a10522712c342871c58a143
- Verdict
- Inconclusive
- File type
- PE Executable · 2.8 MB
Cite this report: https://app.malva.re/sha256/ebfd170776d67428de1053ae6c92a6dee25614c8ec61f488b6f5228b58bbe003
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Portable Executable file
Size
2.97 MB · 2,967,552 B
First seen
2026-08-03 03:45 · 2 months ago
Last seen
2026-08-03 03:45 · 2 months ago
Last analysis
2026-08-03 03:45 · 2 months ago
Hashes
MD5
3fb5dc247a10522712c342871c58a143
Sha1
9f18b6a81334aab60c6168bed636897ee279b3b8
Sha256
ebfd170776d67428de1053ae6c92a6dee25614c8ec61f488b6f5228b58bbe003
Sha384
e74bb0b55e749ec92dbba1cf150aae3e7fbac40ea59ba74e22e5c66df7a9f32697472bf4f2d721d6eabf493e1cc3ebb8
Sha512
247c34b69e1d1c623273abf13718ba0c35cebd1d97abf9f3f6cdbbb6128ae6ba6d1f7676f18363f917d6404a7d9ad427ac963f5a8d745fe1dd0754ed59e13182
SSDeep
49152:HsDadQo+Oss/hMxu93HPF/jOnLuual/BrbNRNX1mTl7XL/UyOF2DY6xa7LOvU9o5:Zd3iERFLOLuual/XoB7XYyO8Ss5bys4a
TLSH
F6D5228DFCB30E74E873C7E7859764BDB16E77448AA08D1A35892B102D12A397C36376
Detection
PeID
Microsoft Visual C++ v6.0 DLLUPolyX 0.3 -> delikon
1 file
EXE3fb5dc247a10522712c342871c58a143
Structure
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:exe
Shape
pe:exe
1 nodes