Suspect
PE Executable
MD5: 89e2a5442a8ee258129d7a477cb5b47b
Size: 5.23 MB
application/x-dosexec
This sample is a 5 MB PE Executable for which Malva.RE's static analysis did not establish a malicious verdict. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 233363e6a24fee6d98830e19b146d18cda72b93dae024608878eaa83763f6dd4
- MD5
- 89e2a5442a8ee258129d7a477cb5b47b
- Verdict
- Inconclusive
- File type
- PE Executable · 5 MB
Cite this report: https://app.malva.re/sha256/233363e6a24fee6d98830e19b146d18cda72b93dae024608878eaa83763f6dd4
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Portable Executable file
Size
5.23 MB · 5,231,616 B
First seen
2026-08-27 05:45 · 2 months ago
Last seen
2026-08-27 05:45 · 2 months ago
Last analysis
2026-08-27 05:45 · 2 months ago
Hashes
MD5
89e2a5442a8ee258129d7a477cb5b47b
Sha1
93069ec347f3efb602a8149f16691cf932d7b3bc
Sha256
233363e6a24fee6d98830e19b146d18cda72b93dae024608878eaa83763f6dd4
Sha384
e8f5315b034dd999713d6117dfa6f180ca299aa58994865991d3576076fbf22a164abd3798a1232c7d5d41095e61962f
Sha512
977b73db1530a1dfa77dd079fd33d8ad03db92584d34023bde851fec3dbde43de441a11150d9ecfb02fbdf90c5d083ec216361fc4d502ef6c5daafcf67d42cf0
SSDeep
98304:0K1p8VidH2wApTtlfZJ2UPHFskBRygIAxYNYp47w9+IVfJOV/24NTjaOMyuL18ZC:r1vApTD322OSy56vp47wDJOVOITjaO/C
TLSH
F63633D56DC2A1BCC497C7FC8243A49E7136376386257D1B7AEC381CAD6AE18603D782
Detection
PeID
Microsoft Visual C++ v6.0 DLLUPolyX 0.3 -> delikon
1 file
EXE89e2a5442a8ee258129d7a477cb5b47b
Structure
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:exe
Shape
pe:exe
1 nodes