Suspect
a2788e1c9b85ddc3e598179c2e3cc929
PE Executable
MD5: a2788e1c9b85ddc3e598179c2e3cc929
Size: 5.3 MB
application/x-dosexec
This sample is a 5.1 MB PE Executable for which Malva.RE's static analysis did not establish a malicious verdict. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- fe5ab151cc1bc84e985263a4af1bde172c17ea6c3733e48d8da6631ca5ff82f3
- MD5
- a2788e1c9b85ddc3e598179c2e3cc929
- Verdict
- Inconclusive
- File type
- PE Executable · 5.1 MB
Cite this report: https://app.malva.re/sha256/fe5ab151cc1bc84e985263a4af1bde172c17ea6c3733e48d8da6631ca5ff82f3
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Portable Executable file
Size
5.3 MB · 5,298,176 B
First seen
2026-10-24 19:30 · 4 days ago
Last seen
2026-10-24 19:30 · 4 days ago
Last analysis
2026-10-24 19:30 · 4 days ago
Hashes
MD5
a2788e1c9b85ddc3e598179c2e3cc929
Sha1
83a80b5baa2a3e24a7e5e3a6466c3a49ff34c802
Sha256
fe5ab151cc1bc84e985263a4af1bde172c17ea6c3733e48d8da6631ca5ff82f3
Sha384
1892e1fab797cab5935bc379f3fd841f639f8eff9af8cffe515e9393c04d2b7e4b40424f5d316acd8001b2b4886f08ef
Sha512
d5f18f0a0d405ad803ef7d826ebe74d4f87876df85de2ea487fba3f220d3b1d17b6968547d6be0bdff05a770549d9de3da05769d7e2a7a92ed2ff6a9f58036a8
SSDeep
98304:DXDqPoBU1aRxcSUZk36SAEdhvxWa9P593R8yAVp2H:DXDqPT1Cxc7k3ZAEUadzR8yc4H
TLSH
35363354626CA1BCF0510E7484B38D2AF7B37C6A97BA4F0F47C486AA0E53B976BD0741
Detection
PeID
Microsoft Visual C++ 6.0 DLL (Debug)Microsoft Visual C++ v6.0 DLLMicrosoft v12.00 64bit C++ DLL - sign ASL ( 64 bit ) UPolyX 0.3 -> delikon
1 file
EXEa2788e1c9b85ddc3e598179c2e3cc929
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:dll
Shape
pe:dll
1 nodes
PE Layout
UNKNWOWNsuspect
Memoryhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential1 file
EXEa2788e1c9b85ddc3e598179c2e3cc929
No malware configuration was found at this point.
PE Layout
UNKNWOWNsuspect
Memoryhuhuhuhuhuhuhuhuhuhuhu
a2788e1c9b85ddc3e598179c2e3cc929
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account