Malicious
PE Executable
MD5: 5870e99a0998e8b8bbf029dab05946b8
Size: 111.1 KB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan
This sample is a 108.5 KB PE Executable identified by Malva.RE as ValleyRat (rat). Static analysis extracted 1 embedded or derived file. It matches 1 YARA rule. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 908b9d1268829e84bb1f10b6d6f37573049d248856a5d3902c7cf7389dfa48bc
- MD5
- 5870e99a0998e8b8bbf029dab05946b8
- Verdict
- Malicious
- File type
- PE Executable · 108.5 KB
- Family
- ValleyRat
- Category
- RAT
Cite this report: https://app.malva.re/sha256/908b9d1268829e84bb1f10b6d6f37573049d248856a5d3902c7cf7389dfa48bc
Related ValleyRat samples
- c806290db9b11e7f25d6eddb9a47c8baadfd190f1d7cf48ddd8d31b4cd76bc14 2026-11-03
- 4421ccd153aa864e3eb4ac89044c92eba48a1ecca7efc759203368004a7ded05 2026-10-19
- a9c759ea8ea13df937b0d7dc7971aec13028f8953a26c620c2f6b7009fb9fea8 2026-10-03
- 1a64a2d29964a9c6797d59bc5628c3b3e2639ae7f1ed2778e97064f63f6119fb 2026-09-29
- 899f994ad277c633879683a8502002c1ca6a5e4db02b7eb233e552b502c1ea42 2026-09-21
- 08f2c963906b126c0a10b47aa28eccebf8e209f3885c54489f771e948dc89b1a 2026-09-14
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Portable Executable file
Size
111.1 KB · 111,104 B
First seen
2026-10-31 14:00 · 3 days ago
Last seen
2026-10-31 14:00 · 3 days ago
Last analysis
2026-10-31 14:00 · 3 days ago
Hashes
MD5
5870e99a0998e8b8bbf029dab05946b8
Sha1
311205ab5234d738166ffb0b6f6c0ae9bd9cbc02
Sha256
908b9d1268829e84bb1f10b6d6f37573049d248856a5d3902c7cf7389dfa48bc
Sha384
efba428a00950f4273f599f927e23070a9c51acd640b8767079ca590f88a0406fc500b4c2605bfe0c67538b58a291dd1
Sha512
6c144e44f76b288b08735b545b8361ebed6a18953b5c7dbd39995af1186f6e2ea7ef3c032d94dbb4c928ed3548088cdc3c8cf5e21373dca44530cc63cdd11cb0
SSDeep
3072:y1iqoHq83FphFFwYNCHjUE60z68XEPKt:y1izq83RwYNHX31y
TLSH
F9B37C2172E0C072C093253159F9EBB24A7EF83117B855CBB7E816BA5F603C16A7539B
Detection
PeID
Microsoft Visual C++ 6.0 DLL (Debug)Microsoft Visual C++ 8Microsoft Visual C++ 8Microsoft Visual C++ v6.0 DLLVC8 -> Microsoft Corporation
1 malicious · 2 files
EXE5870e99a0998e8b8bbf029dab05946b8ValleyRat
Structure
BINResources
STICH
beta
No STICH Path has been generated for this analysis yet.
1 structural branch were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.
bin
1