Suspect
PE Executable
MD5: 7f3ef2f64668e261838e06c85609bc2b
Size: 5.32 MB
application/x-dosexec
This sample is a 5.1 MB PE Executable for which Malva.RE's static analysis did not establish a malicious verdict. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- aaf2c6bd8e8ebb3170114fbec5633db6fb0c8c1a72c523c9558090e6e4141a68
- MD5
- 7f3ef2f64668e261838e06c85609bc2b
- Verdict
- Inconclusive
- File type
- PE Executable · 5.1 MB
Cite this report: https://app.malva.re/sha256/aaf2c6bd8e8ebb3170114fbec5633db6fb0c8c1a72c523c9558090e6e4141a68
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Portable Executable file
Size
5.32 MB · 5,324,288 B
First seen
2026-10-22 18:45 · 3 days ago
Last seen
2026-10-22 18:45 · 3 days ago
Last analysis
2026-10-22 18:45 · 3 days ago
Hashes
MD5
7f3ef2f64668e261838e06c85609bc2b
Sha1
390ac7f22444d2a56caff2fcc8970a2e0e6473ef
Sha256
aaf2c6bd8e8ebb3170114fbec5633db6fb0c8c1a72c523c9558090e6e4141a68
Sha384
9b28a3425c88ddde8ddb25788e58017b1688715cd7b9a6144c05f9ee54b754ac5656267690a59e157651881265b39f68
Sha512
3e2c91349f4e4063070553af2fb6d2ce4fd79ce5db532c9fafaa274da6220091204eb7160d5012b9704cd481d56d226bcf525cd1471abdc3feb6bc854b595ac9
SSDeep
49152:ZdPspNcJF6iaX4GHb9CGM4m0fx3fD0+WjJjVqiaxMcS72Dfspc7yNGeB+jb6MbWD:gb9muGFrZUHl7
TLSH
2B36B6077182A5B9D29A8070A71C55F4A9E23F6AF7E185E70F3C483C79914E28FB7D12
Detection
PeID
Microsoft Visual C++ 8.0 (DLL)Microsoft Visual C++ v6.0 DLLPrivate EXE Protector V2.30-V2.3X -> SetiSoft Team
1 file
EXE7f3ef2f64668e261838e06c85609bc2b
Structure
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:exe
Shape
pe:exe
1 nodes
| Name | Value |
|---|---|
| Info | PDB Path: implant.pdb |