Malicious
a0e99b168dc62db6b25d741e3df09f5e
PE Executable
MD5: a0e99b168dc62db6b25d741e3df09f5e
Size: 121.34 KB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Portable Executable file
Size
121.34 KB · 121,344 B
First seen
2026-08-13 14:02 · 2 months ago
Last seen
2026-08-13 14:02 · 2 months ago
Last analysis
2026-09-03 21:22 · one month ago
Hashes
MD5
a0e99b168dc62db6b25d741e3df09f5e
Sha1
59f823f5816041e19d5a480ecf2311121de0e0ae
Sha256
caf06121aa982d9d7a75e22aae1e6aa4457cd702e0c5dbf5a7a90e5771a5be80
Sha384
13a2912d7ff50a8b6f7bc4c8d89fff961860372d9a09adb7f3047d661ce46f6fa461cf2f199d4987d5b3906b871b22ad
Sha512
b6ba7b110e02657911f342a8691688af22607d874e7342dfe05146f928f078aa0d1b022bd517c3538dc360015165b9fad684e79af31c5a73958e7fcc9873b656
SSDeep
1536:eNp89dFZj9Icn4Umi45Gbd+p70L5qQBBGr5ur0kZlang2KJbJ6QQ+IeFr:eNurpIchmV3p7aHgmIKJJA+IeFr
TLSH
9BC37D21B660C032D5E6253E99B98B725B7F78319B7840CB77D40B3A5EA03D1AF38356
Detection
PeID
MS Visual C++ v7.0 DLLMicrosoft Visual C++ 6.0 DLL (Debug)Microsoft Visual C++ v6.0 DLLVisual C++ 2003 DLL -> MicrosoftVisual C++ 2005 DLL -> Microsoft
1 malicious · 1 file
EXEa0e99b168dc62db6b25d741e3df09f5eValleyRat
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:dll
Shape
pe:dll
1 nodes
PE Layout
UNKNWOWNsuspect
Memoryhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential1 malicious · 1 file
EXEa0e99b168dc62db6b25d741e3df09f5eValleyRat
No malware configuration was found at this point.
PE Layout
UNKNWOWNsuspect
Memoryhuhuhuhuhuhuhuhuhuhuhu
a0e99b168dc62db6b25d741e3df09f5e
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account