Suspect
PE Executable
MD5: a2788e1c9b85ddc3e598179c2e3cc929
Size: 5.3 MB
application/x-dosexec
This sample is a 5.1 MB PE Executable for which Malva.RE's static analysis did not establish a malicious verdict. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- fe5ab151cc1bc84e985263a4af1bde172c17ea6c3733e48d8da6631ca5ff82f3
- MD5
- a2788e1c9b85ddc3e598179c2e3cc929
- Verdict
- Inconclusive
- File type
- PE Executable · 5.1 MB
Cite this report: https://app.malva.re/sha256/fe5ab151cc1bc84e985263a4af1bde172c17ea6c3733e48d8da6631ca5ff82f3
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Portable Executable file
Size
5.3 MB · 5,298,176 B
First seen
2026-10-24 19:30 · 4 days ago
Last seen
2026-10-24 19:30 · 4 days ago
Last analysis
2026-10-24 19:30 · 4 days ago
Hashes
MD5
a2788e1c9b85ddc3e598179c2e3cc929
Sha1
83a80b5baa2a3e24a7e5e3a6466c3a49ff34c802
Sha256
fe5ab151cc1bc84e985263a4af1bde172c17ea6c3733e48d8da6631ca5ff82f3
Sha384
1892e1fab797cab5935bc379f3fd841f639f8eff9af8cffe515e9393c04d2b7e4b40424f5d316acd8001b2b4886f08ef
Sha512
d5f18f0a0d405ad803ef7d826ebe74d4f87876df85de2ea487fba3f220d3b1d17b6968547d6be0bdff05a770549d9de3da05769d7e2a7a92ed2ff6a9f58036a8
SSDeep
98304:DXDqPoBU1aRxcSUZk36SAEdhvxWa9P593R8yAVp2H:DXDqPT1Cxc7k3ZAEUadzR8yc4H
TLSH
35363354626CA1BCF0510E7484B38D2AF7B37C6A97BA4F0F47C486AA0E53B976BD0741
Detection
PeID
Microsoft Visual C++ 6.0 DLL (Debug)Microsoft Visual C++ v6.0 DLLMicrosoft v12.00 64bit C++ DLL - sign ASL ( 64 bit ) UPolyX 0.3 -> delikon
1 file
EXEa2788e1c9b85ddc3e598179c2e3cc929
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:dll
Shape
pe:dll
1 nodes
PE Layout
UNKNWOWNsuspect
Memoryhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential