Suspect
98b8db2b82f626f52bd846cfe6c47ced
PE Executable
MD5: 98b8db2b82f626f52bd846cfe6c47ced
Size: 5.3 MB
application/x-dosexec
This sample is a 5.1 MB PE Executable for which Malva.RE's static analysis did not establish a malicious verdict. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 502463a92e5f7b793ab5e082467d47d0ad6c8171c3eb6f98db7b095907135c2e
- MD5
- 98b8db2b82f626f52bd846cfe6c47ced
- Verdict
- Inconclusive
- File type
- PE Executable · 5.1 MB
Cite this report: https://app.malva.re/sha256/502463a92e5f7b793ab5e082467d47d0ad6c8171c3eb6f98db7b095907135c2e
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Portable Executable file
Size
5.3 MB · 5,298,176 B
First seen
2026-07-26 05:45 · 3 months ago
Last seen
2026-07-26 05:45 · 3 months ago
Last analysis
2026-07-26 15:30 · 3 months ago
Hashes
MD5
98b8db2b82f626f52bd846cfe6c47ced
Sha1
1d6d4a99c92787defe61ad9e771b72dff200a0fd
Sha256
502463a92e5f7b793ab5e082467d47d0ad6c8171c3eb6f98db7b095907135c2e
Sha384
2ccdfaed08c6ff70dda57e4538d33cf6fcb89dbf845a4dadc0231767f1c92e33539864a8cf01c61de573fcd88cd23c72
Sha512
b4be3eb5bd4a632eb8170b4c9764b3340ea33592470a1853511094ed214594acb8d366969aa1165261abc5010927467b0c13dd211aadc1782ccbd794b74de849
SSDeep
49152:jnsnnMSPbcBVQej/1INRx+TSqTdX1HkQo6SAARdhnv:DMnPoBhz1aRxcSUDk36SAEdhv
TLSH
5136239931BC81FCD106297484B78E22F3B37C6A22FE5B0F9B40457A2E53B56B750B52
Detection
PeID
Microsoft Visual C++ v6.0 DLLMicrosoft v12.00 64bit C++ DLL - sign ASL ( 64 bit ) UPolyX 0.3 -> delikon
1 file
EXE98b8db2b82f626f52bd846cfe6c47ced
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:dll
Shape
pe:dll
1 nodes
PE Layout
UNKNWOWNsuspect
Memoryhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential1 file
EXE98b8db2b82f626f52bd846cfe6c47ced
No malware configuration was found at this point.
PE Layout
UNKNWOWNsuspect
Memoryhuhuhuhuhuhuhuhuhuhuhu
98b8db2b82f626f52bd846cfe6c47ced
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account