Suspect
afc480fc25d62245152554744b9a0f99
Disk Image
MD5: afc480fc25d62245152554744b9a0f99
Size: 8.05 MB
This sample is a 7.7 MB Disk Image for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 50 embedded or derived files. It matches 2 YARA rules. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 0c0377aae222d23fa6c1bab5854d1fdc18de8412f9e352e04ee0ea98305a18c8
- MD5
- afc480fc25d62245152554744b9a0f99
- Verdict
- Inconclusive
- File type
- Disk Image · 7.7 MB
Cite this report: https://app.malva.re/sha256/0c0377aae222d23fa6c1bab5854d1fdc18de8412f9e352e04ee0ea98305a18c8
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Disk image
Size
8.05 MB · 8,046,592 B
First seen
2026-10-08 09:00 · 20 days ago
Last seen
2026-10-08 09:00 · 20 days ago
Last analysis
2026-10-08 09:00 · 20 days ago
Hashes
MD5
afc480fc25d62245152554744b9a0f99
Sha1
212a7cbd86fa9e3c198b4eb20a7d5b0693dd5028
Sha256
0c0377aae222d23fa6c1bab5854d1fdc18de8412f9e352e04ee0ea98305a18c8
Sha384
bb8d363572c6d9cfb853585ee0e30a0f882c43a893c25c41c937ac200c43b6180f892e1ad517fa4951c7c93cef4c5395
Sha512
0252e7f20f4b1d069f90a885d487ff2f61d35a0d35fa3f27107ae8d15daef44fbcaa96058011e8162c6f832803d7cc209b8aa49f9688ac4ea052771ba2465f22
SSDeep
98304:p6QtnZjT+Mj0t0CJpBhBAUZL4qhSRLAV:p6mZ/TgKEpBhVEqoRsV
TLSH
1E869D36B79405E5D0B380B884936213E7B1BC464370DBCB1A95A56B4F377EA6E3B348
51 files
ISOafc480fc25d62245152554744b9a0f99
EXENotice from Tax Departmen.exe
Structure
P7B[Authenticode]_4b518649.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:0
BINRT_MANIFEST
BINID:0001
BINID:0
DATStructureI_Init.dat
DATSystemKernel.dat
DLLmsvcp120.dll
Structure
P7B[Authenticode]_736a7009.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
DLLmsvcp140.dll
Structure
P7B[Authenticode]_556ff52a.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
DLLmsvcp140_1.dll
Structure
P7B[Authenticode]_044dd016.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
DLLmsvcp140_2.dll
Structure
P7B[Authenticode]_539e25b3.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
DLLmsvcp140_atomic_wait.dll
Structure
P7B[Authenticode]_7806315f.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
DLLmsvcp140_codecvt_ids.dll
Structure
P7B[Authenticode]_0e6c8714.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
CFGprotocol.cfg
DLLroboform-x64.dll
Structure
P7B[Authenticode]_d772a4ef.p7b
BINResources
BINRT_ICON
BINID:0001
BINID:1028
BINID:0002
BINID:1028
BINID:0003
BINID:1028
BINID:0004
BINID:1028
BINID:0005
BINID:1028
BINID:0006
BINID:1028
BINRT_GROUP_CURSOR4
BINID:01F1
BINID:1028
BINRT_VERSION
BINID:0001
BINID:1028
DATstructure_end.dat
DATsystem.dat
DLLvccorlib140.dll
Structure
P7B[Authenticode]_c0218757.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
BINRT_MANIFEST
BINID:0002
BINID:1033
DLLvcruntime140.dll
Structure
P7B[Authenticode]_91244f14.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
DLLvcruntime140_1.dll
Structure
P7B[Authenticode]_ecf5b973.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
DLLvcruntime140_threads.dll
Structure
P7B[Authenticode]_821e4d38.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
STICH
beta
No STICH Path has been generated for this analysis yet.
5 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.
bin
551 files
ISOafc480fc25d62245152554744b9a0f99
EXENotice from Tax Departmen.exe
DATStructureI_Init.dat
DATSystemKernel.dat
DLLmsvcp120.dll
DLLmsvcp140.dll
DLLmsvcp140_1.dll
DLLmsvcp140_2.dll
DLLmsvcp140_atomic_wait.dll
DLLmsvcp140_codecvt_ids.dll
CFGprotocol.cfg
DLLroboform-x64.dll
DATstructure_end.dat
DATsystem.dat
DLLvccorlib140.dll
DLLvcruntime140.dll
DLLvcruntime140_1.dll
DLLvcruntime140_threads.dll
No malware configuration was found at this point.
Sign in or create a free account to view the matching YARA rules.
Create a free account