Malicious
PE Executable
MD5: a0e99b168dc62db6b25d741e3df09f5e
Size: 121.34 KB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Portable Executable file
Size
121.34 KB · 121,344 B
First seen
2026-08-13 14:02 · 2 months ago
Last seen
2026-08-13 14:02 · 2 months ago
Last analysis
2026-09-03 21:22 · one month ago
Hashes
MD5
a0e99b168dc62db6b25d741e3df09f5e
Sha1
59f823f5816041e19d5a480ecf2311121de0e0ae
Sha256
caf06121aa982d9d7a75e22aae1e6aa4457cd702e0c5dbf5a7a90e5771a5be80
Sha384
13a2912d7ff50a8b6f7bc4c8d89fff961860372d9a09adb7f3047d661ce46f6fa461cf2f199d4987d5b3906b871b22ad
Sha512
b6ba7b110e02657911f342a8691688af22607d874e7342dfe05146f928f078aa0d1b022bd517c3538dc360015165b9fad684e79af31c5a73958e7fcc9873b656
SSDeep
1536:eNp89dFZj9Icn4Umi45Gbd+p70L5qQBBGr5ur0kZlang2KJbJ6QQ+IeFr:eNurpIchmV3p7aHgmIKJJA+IeFr
TLSH
9BC37D21B660C032D5E6253E99B98B725B7F78319B7840CB77D40B3A5EA03D1AF38356
Detection
PeID
MS Visual C++ v7.0 DLLMicrosoft Visual C++ 6.0 DLL (Debug)Microsoft Visual C++ v6.0 DLLVisual C++ 2003 DLL -> MicrosoftVisual C++ 2005 DLL -> Microsoft
1 malicious · 1 file
EXEa0e99b168dc62db6b25d741e3df09f5eValleyRat
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:dll
Shape
pe:dll
1 nodes
PE Layout
UNKNWOWNsuspect
Memoryhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential