Suspect
6d8e5d8982bd36700581122162683ac4
PE Executable
MD5: 6d8e5d8982bd36700581122162683ac4
Size: 5.3 MB
application/x-dosexec
This sample is a 5.1 MB PE Executable for which Malva.RE's static analysis did not establish a malicious verdict. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- e993363a5da51bfe0bcc541f8ac83a13ba162cdd69724ee181446f2b7d42bc5e
- MD5
- 6d8e5d8982bd36700581122162683ac4
- Verdict
- Inconclusive
- File type
- PE Executable · 5.1 MB
Cite this report: https://app.malva.re/sha256/e993363a5da51bfe0bcc541f8ac83a13ba162cdd69724ee181446f2b7d42bc5e
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Portable Executable file
Size
5.3 MB · 5,298,176 B
First seen
2026-10-31 11:15 · yesterday
Last seen
2026-10-31 11:15 · yesterday
Last analysis
2026-10-31 11:15 · yesterday
Hashes
MD5
6d8e5d8982bd36700581122162683ac4
Sha1
3977162db982cda54febfd94a5e408e4f73a6f86
Sha256
e993363a5da51bfe0bcc541f8ac83a13ba162cdd69724ee181446f2b7d42bc5e
Sha384
74c01048b2a1321e3a177f6160b3e9c22856fdf3bc12ec7478f1e1e05956351903561d0f71df8b4a01457db7d8e40385
Sha512
7fbe65e86388fd2e3934ed5564d9e42a3f2294070e4d134be7fce7c3eacb9d7babd4a64cd007a0f932d140f0b9822d5cb0fe7155a73ed16a3a682dde437544a6
SSDeep
49152:jnXnAQqMSPbcBVQej/1Vx+TSqTdX1HkQo6SAARdhnvxJM0H9PAMEc:DXDqPoBhz1VxcSUDk36SAEdhvxWa9P5
TLSH
16363358727C91BCE10619B448B3CD26E7737C5267BE5B0F8B5086661F03B5BBBA0B12
Detection
PeID
Microsoft Visual C++ 6.0 DLL (Debug)Microsoft Visual C++ v6.0 DLLMicrosoft v12.00 64bit C++ DLL - sign ASL ( 64 bit ) UPolyX 0.3 -> delikon
1 file
EXE6d8e5d8982bd36700581122162683ac4
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:dll
Shape
pe:dll
1 nodes
PE Layout
UNKNWOWNsuspect
Memoryhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential1 file
EXE6d8e5d8982bd36700581122162683ac4
No malware configuration was found at this point.
PE Layout
UNKNWOWNsuspect
Memoryhuhuhuhuhuhuhuhuhuhuhu
6d8e5d8982bd36700581122162683ac4
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account