Suspicious
Suspect

9b11e6ed6a0687ef06fe3a73dc16b4ec

PE Executable
MD5: 9b11e6ed6a0687ef06fe3a73dc16b4ec
Size: 4.61 KB
application/x-dosexec

This sample is a 4.5 KB PE Executable for which Malva.RE's static analysis did not establish a malicious verdict. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
011fd979619d97af8e1891c263fed4993e7093ab6a6e290b48ecee3d166d74d0
MD5
9b11e6ed6a0687ef06fe3a73dc16b4ec
Verdict
Inconclusive
File type
PE Executable · 4.5 KB

Cite this report: https://app.malva.re/sha256/011fd979619d97af8e1891c263fed4993e7093ab6a6e290b48ecee3d166d74d0

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
Portable Executable file
Size
4.61 KB · 4,608 B
First seen
2026-10-10 00:15 · 17 days ago
Last seen
2026-10-10 00:15 · 17 days ago
Last analysis
2026-10-10 00:15 · 17 days ago
Hashes
MD5 9b11e6ed6a0687ef06fe3a73dc16b4ec Sha1 cbf13492eb04c76f48354ee946e9a91b6a21e890 Sha256 011fd979619d97af8e1891c263fed4993e7093ab6a6e290b48ecee3d166d74d0 Sha384 97941050fb5a6f4ad449d4504530afc25f86b32c6ae662953042c5df8cfc0e4516eb24b4a859cec1be17c41135154610 Sha512 3f47df44780dffddc9084409b33dcdce9cf913898617c21f3a512ad69cf521cae8d175feb546c7ddeb4b5d4773c363c521953508b2aa8b6ed4f38425f8145055 SSDeep 48:6IIF9BlQaexAgZB7An0cF5uduvxRxUjbON9XM/ge93ahr0/:y9BOaMh20cF50uDxUOvXeg TLSH 4691C64270B989E7E85C46BF4C4FB8A0B91D740A41C483A64378A5993E3A57BF57CB0E

1 file
EXE9b11e6ed6a0687ef06fe3a73dc16b4ec
Structure
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path pe:exe
Shape pe:exe
1 nodes

Name Value
Info
PDB Path: t$mn

1 file
EXE9b11e6ed6a0687ef06fe3a73dc16b4ec
Structure
No malware configuration was found at this point.
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙