Suspect
804fdc91c8c8528a57ef57b505f5fd0f
PE Executable
MD5: 804fdc91c8c8528a57ef57b505f5fd0f
Size: 220.02 KB
application/x-dosexec
This sample is a 214.9 KB PE Executable for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 1 embedded or derived file. It matches 3 YARA rules. Observed behaviours map to MITRE ATT&CK T1059.007. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 3f4b0971dd6bd690a4407be17fba8b2045168cdd236d0cbe6f711f5c6e2a2c1c
- MD5
- 804fdc91c8c8528a57ef57b505f5fd0f
- Verdict
- Inconclusive
- File type
- PE Executable · 214.9 KB
- MITRE ATT&CK
- T1059.007
Cite this report: https://app.malva.re/sha256/3f4b0971dd6bd690a4407be17fba8b2045168cdd236d0cbe6f711f5c6e2a2c1c
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Portable Executable file
Size
220.02 KB · 220,017 B
Hashes
MD5
804fdc91c8c8528a57ef57b505f5fd0f
Sha1
f381c650057b4da1a1fb4ad4912cb82fef971b1e
Sha256
3f4b0971dd6bd690a4407be17fba8b2045168cdd236d0cbe6f711f5c6e2a2c1c
Sha384
2c8c6115da6a6961ca3420b557eaa9e0d2c481a30c88a8edaab23a224872c3b9cd6836d5e41820fcbd28ea7953f101c8
Sha512
a1062a73c32132b10daecd2e8d3b41cb43be6506fa23b5b890aa0dbb71eac64050fd66973353f3bd303dbf825126299f6a9e16ca7d9cb271e53fba08f0ae9d55
SSDeep
3072:AVUGxB97xo/1LvH83e+6u2O5gpQCRmKAHyTKwlWz:AhxL7xGjH83RVHlCRwyTKc8
TLSH
41241854EE8B61F4EE1B09F049CBF37F46312E11C129AEB2EF498651F523F32694A605
Detection
PeID
Microsoft Visual C++ v6.0 DLLUPolyx 0.4 -> delikon
2 files
EXE804fdc91c8c8528a57ef57b505f5fd0fT1059.007
Structure
BINOverlay_4f2c47cf.bin
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:exe~T1059.007>bin
Shape
pe:exe>bin
technique2 nodes
| Name | Value |
|---|---|
| Info | Overlay extracted: Overlay_4f2c47cf.bin (6513 bytes) |
2 files
EXE804fdc91c8c8528a57ef57b505f5fd0fT1059.007
Structure
BINOverlay_4f2c47cf.bin
No malware configuration was found at this point.
Sign in or create a free account to view the matching YARA rules.
Create a free account