Suspicious
Suspect

99803bec8097502b6d6c905190b7ebea

Disk Image
MD5: 99803bec8097502b6d6c905190b7ebea
Size: 401.41 KB

This sample is a 392 KB Disk Image for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 13 embedded or derived files. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
3043e3a424da1d0987c460fe7c817c7d7708184ee69ba09f00ceef3281f9a6be
MD5
99803bec8097502b6d6c905190b7ebea
Verdict
Inconclusive
File type
Disk Image · 392 KB

Cite this report: https://app.malva.re/sha256/3043e3a424da1d0987c460fe7c817c7d7708184ee69ba09f00ceef3281f9a6be

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
Disk image
Size
401.41 KB · 401,408 B
First seen
2026-10-21 05:45 · 7 days ago
Last seen
2026-10-21 05:45 · 7 days ago
Last analysis
2026-10-21 05:45 · 7 days ago
Hashes
MD5 99803bec8097502b6d6c905190b7ebea Sha1 81f04defd17cdb9f34e14115b68ad0a55f47e301 Sha256 3043e3a424da1d0987c460fe7c817c7d7708184ee69ba09f00ceef3281f9a6be Sha384 c6aacca3e83534617092bea902d7e94dbcf2553b40e0f8076342f9dbce7449bffb6338f5a40c252b16d995177be73e17 Sha512 9bdd5139c8e52af39bf7020fc9e672e5b0fd256bcbea8f1af5b3bf7c5dece0200931ae1595ea3f756421da38483e147308dbfd5e503e5f128e9e50f04143b760 SSDeep 6144:TU48FrZ3iTq1rhNW5L6dpNUuyFfX/iz5VgZuPFB:TUHlN6ePUXFCtSZcB TLSH 208439217544CF32E56F017498B49AF9562FAD218F614BD7B38C7E293B301C2AE3265B

14 files
ISO99803bec8097502b6d6c905190b7ebea
EXEReader_en_install.exe
Structure
P7B[Authenticode]_79c33d4c.p7b
BINResources
BINRT_ICON
BINID:0001
IMGID:16393
IMGID:16393-preview.png
BINID:0002
BINID:16393
BINID:0003
BINID:16393
BINID:0004
BINID:16393
BINID:0005
BINID:16393
BINID:0006
BINID:16393
BINRT_GROUP_CURSOR4
BINID:0065
BINID:16393
BINRT_VERSION
BINID:0001
BINID:16393
BINRT_MANIFEST
BINID:0001
BINID:1033
DLLmsi.dll
Structure
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 4 STICH kept: 1secondary ignored: 3
bin 2img 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path img:disk>pe:dll
Shape img:disk>pe:dll
2 nodes

14 files
ISO99803bec8097502b6d6c905190b7ebea
No malware configuration was found at this point.
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙