Suspect
PE Executable
MD5: 98b8db2b82f626f52bd846cfe6c47ced
Size: 5.3 MB
application/x-dosexec
This sample is a 5.1 MB PE Executable for which Malva.RE's static analysis did not establish a malicious verdict. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 502463a92e5f7b793ab5e082467d47d0ad6c8171c3eb6f98db7b095907135c2e
- MD5
- 98b8db2b82f626f52bd846cfe6c47ced
- Verdict
- Inconclusive
- File type
- PE Executable · 5.1 MB
Cite this report: https://app.malva.re/sha256/502463a92e5f7b793ab5e082467d47d0ad6c8171c3eb6f98db7b095907135c2e
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Portable Executable file
Size
5.3 MB · 5,298,176 B
First seen
2026-07-26 05:45 · 3 months ago
Last seen
2026-07-26 05:45 · 3 months ago
Last analysis
2026-07-26 15:30 · 3 months ago
Hashes
MD5
98b8db2b82f626f52bd846cfe6c47ced
Sha1
1d6d4a99c92787defe61ad9e771b72dff200a0fd
Sha256
502463a92e5f7b793ab5e082467d47d0ad6c8171c3eb6f98db7b095907135c2e
Sha384
2ccdfaed08c6ff70dda57e4538d33cf6fcb89dbf845a4dadc0231767f1c92e33539864a8cf01c61de573fcd88cd23c72
Sha512
b4be3eb5bd4a632eb8170b4c9764b3340ea33592470a1853511094ed214594acb8d366969aa1165261abc5010927467b0c13dd211aadc1782ccbd794b74de849
SSDeep
49152:jnsnnMSPbcBVQej/1INRx+TSqTdX1HkQo6SAARdhnv:DMnPoBhz1aRxcSUDk36SAEdhv
TLSH
5136239931BC81FCD106297484B78E22F3B37C6A22FE5B0F9B40457A2E53B56B750B52
Detection
PeID
Microsoft Visual C++ v6.0 DLLMicrosoft v12.00 64bit C++ DLL - sign ASL ( 64 bit ) UPolyX 0.3 -> delikon
1 file
EXE98b8db2b82f626f52bd846cfe6c47ced
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:dll
Shape
pe:dll
1 nodes
PE Layout
UNKNWOWNsuspect
Memoryhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential