Suspect
PE Executable
MD5: 7eecfb6c5f368a592b8edac769fa47cb
Size: 5.3 MB
application/x-dosexec
This sample is a 5.1 MB PE Executable for which Malva.RE's static analysis did not establish a malicious verdict. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 8df06bfda2a5604a312655437d45aae27ad0449bf4c01051a494775e930d8cf1
- MD5
- 7eecfb6c5f368a592b8edac769fa47cb
- Verdict
- Inconclusive
- File type
- PE Executable · 5.1 MB
Cite this report: https://app.malva.re/sha256/8df06bfda2a5604a312655437d45aae27ad0449bf4c01051a494775e930d8cf1
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Portable Executable file
Size
5.3 MB · 5,298,176 B
First seen
2026-10-22 17:15 · 10 days ago
Last seen
2026-10-22 17:15 · 10 days ago
Last analysis
2026-10-22 17:15 · 10 days ago
Hashes
MD5
7eecfb6c5f368a592b8edac769fa47cb
Sha1
da6c87eb008d9fef66488e80d5ef8de3c24f0e99
Sha256
8df06bfda2a5604a312655437d45aae27ad0449bf4c01051a494775e930d8cf1
Sha384
ecb74b7fa0959f7820f8465f078825105514987c42951bef5df9953b039afed06b83249d22bed084c05c7e5652741ae9
Sha512
524f9b31c5c4cb89a6073eebdf658d866969201056820b178e14d1ef7802b2dd9185fec2c39129309cd7a08daaf44067d0ceb26f3f08601b08dc50c7c9e45d61
SSDeep
49152:jnsnGMSPbcBVQej/18SqTdX1HkQo6SAARdhnv:DMGPoBhz18SUDk36SAEdhv
TLSH
2736239571A880F4C506217494BB4E15F3B3BC2A22BE560FEF508A3A2E63F52F764753
Detection
PeID
Microsoft Visual C++ v6.0 DLLMicrosoft v12.00 64bit C++ DLL - sign ASL ( 64 bit ) UPolyX 0.3 -> delikon
1 file
EXE7eecfb6c5f368a592b8edac769fa47cb
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:dll
Shape
pe:dll
1 nodes
PE Layout
UNKNWOWNsuspect
Memoryhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential