Suspicious
Suspect

b50a731a235dc24e6e463beb71b603d1

Disk Image
MD5: b50a731a235dc24e6e463beb71b603d1
Size: 1.27 MB

This sample is a 1.2 MB Disk Image for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 42 embedded or derived files. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
f90bcc14a17c591a349af7b7525cce4e6811110e32bf08a7352c25f3f2b6e792
MD5
b50a731a235dc24e6e463beb71b603d1
Verdict
Inconclusive
File type
Disk Image · 1.2 MB

Cite this report: https://app.malva.re/sha256/f90bcc14a17c591a349af7b7525cce4e6811110e32bf08a7352c25f3f2b6e792

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
Disk image
Size
1.27 MB · 1,273,856 B
First seen
2026-10-22 11:16 · 6 days ago
Last seen
2026-10-22 11:16 · 6 days ago
Last analysis
2026-10-22 11:16 · 6 days ago
Hashes
MD5 b50a731a235dc24e6e463beb71b603d1 Sha1 8f96ee8ec4aa7d767f7f6defd2dbf964b50d6423 Sha256 f90bcc14a17c591a349af7b7525cce4e6811110e32bf08a7352c25f3f2b6e792 Sha384 ef2add11e49fabbb77cd4aa0269c03fe9dc1bfb5cc9c93c1e27e7c0d33dcd8fc0ca45b65e453a2aa5b8332fd3d5d6854 Sha512 a47a26093e881945c83731d0af11f55d10954bbcc1044f19b8a09431976a876227057b8eb7ca7a12bdb89bdc7d26f130d3c75a66a0720eb2f394905d633f4a4a SSDeep 24576:t8q1L8bEuXsj6ME5pvOIogH5zpPNTKGKmmUYUsK:2IL8bdXS6MSpvOIokpVTCUYU TLSH 0A456D0793E902ADE0B7E13C89634911E6767C1907309ADF23A4B96A2F737E09F79711

43 files
ISOb50a731a235dc24e6e463beb71b603d1
EXEH5810181576.exe
Structure
P7B[Authenticode]_bbbe7616.p7b
BINResources
BINDICTIONARY
BINID:0097
BINID:1033
BINID:0098
BINID:1033
BINID:0099
BINID:1033
BINID:009A
BINID:1033
BINID:009B
BINID:1033
BINID:009C
BINID:1033
BINID:009D
BINID:1033
BINID:009E
BINID:1033
BINID:009F
BINID:1033
BINID:00A0
BINID:1033
BINID:00A1
BINID:1033
BINID:00A2
BINID:1033
BINID:00A3
BINID:1033
BINID:00A4
BINID:1033
BINID:00A5
BINID:1033
BINID:00A6
BINID:1033
BINID:00A7
BINID:1033
BINID:00A8
BINID:1033
BINID:00A9
BINID:1033
BINID:00AA
BINID:1033
BINID:00AB
BINID:1033
BINID:00AC
BINID:1033
BINID:00AD
BINID:1033
BINID:00AE
BINID:1033
BINID:00AF
BINID:1033
BINID:00B0
BINID:1033
BINRT_ICON
BINID:0001
IMGID:1033
IMGID:1033-preview.png
BINID:0002
BINID:1033
BINID:0003
BINID:1033
BINID:0004
BINID:1033
BINID:0005
BINID:1033
BINID:0006
BINID:1033
BINID:0007
BINID:1033
BINID:0008
BINID:1033
BINRT_DIALOG
BINID:00C9
BINID:1033
BINRT_GROUP_CURSOR4
BINID:0065
BINID:1033
BINRT_VERSION
BINID:0001
BINID:1033
BINRT_MANIFEST
BINID:0001
BINID:1033
DLLcrCLienT.dLl
Structure
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 4 STICH kept: 1secondary ignored: 3
bin 2img 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path img:disk>pe:dll
Shape img:disk>pe:dll
2 nodes

43 files
ISOb50a731a235dc24e6e463beb71b603d1
No malware configuration was found at this point.
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙