Suspect
PE Executable
MD5: 6c88ba0d073727a5cf26861eeb8d0842
Size: 5.41 MB
application/x-dosexec
This sample is a 5.2 MB PE Executable for which Malva.RE's static analysis did not establish a malicious verdict. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- db3221797ab08c02a0424916696e05086b3d0ec0e8a7a5cab6c7eafa5ef10976
- MD5
- 6c88ba0d073727a5cf26861eeb8d0842
- Verdict
- Inconclusive
- File type
- PE Executable · 5.2 MB
Cite this report: https://app.malva.re/sha256/db3221797ab08c02a0424916696e05086b3d0ec0e8a7a5cab6c7eafa5ef10976
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Portable Executable file
Size
5.41 MB · 5,410,816 B
First seen
2026-10-22 18:45 · 4 days ago
Last seen
2026-10-22 18:45 · 4 days ago
Last analysis
2026-10-22 18:45 · 4 days ago
Hashes
MD5
6c88ba0d073727a5cf26861eeb8d0842
Sha1
25c27af11a4da46ff74ba613a1108026efe08e15
Sha256
db3221797ab08c02a0424916696e05086b3d0ec0e8a7a5cab6c7eafa5ef10976
Sha384
332793b6eb8fe822c14750335afe4123c3f8b8fcbd53db616b07b1f481cfe4bf07ac4e241b279aa6729c391a955e7d31
Sha512
020691c5f94d6312387520f883a9935ceb8a517ac7ec71f2127afa273c3e209f66834025aa4c6d45add247f273b14f9996bb09f213ca64776759a70d893a5ea8
SSDeep
49152:RXWXpS2lT6jD7+5uf+2SM9op0w3oN8+r685OWG1qRSqjRy3SgBGuLJKuf7akiqBT:RzPLYrjOAfmohQw/HSHK
TLSH
D246B4A6254EE8A324FFDE9EF2B9CCFD48C344646ADB4C506859CBDB6DACA00C0F4554
Detection
PeID
ASProtect v1.2 -> Alexey Solodovnikov (h1)Microsoft Visual C++ 8.0 (DLL)Microsoft Visual C++ v6.0 DLL
1 file
EXE6c88ba0d073727a5cf26861eeb8d0842
Structure
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:exe
Shape
pe:exe
1 nodes
| Name | Value |
|---|---|
| Info | PDB Path: loader.pdb |