Suspicious
Suspect

bdfb8b684274cc085065407ae0f09227

PE Executable
MD5: bdfb8b684274cc085065407ae0f09227
Size: 5.41 MB
application/x-dosexec

This sample is a 5.2 MB PE Executable. Malva.RE parsed it statically and found no known malware family, configuration or malicious signature among its 403 YARA rules. Static analysis extracted 1 embedded or derived file. Static analysis cannot prove a file is harmless: an unknown or heavily packed threat can go undetected. The file was parsed and decompiled, never executed.

SHA256
ad81d460e0a27345ec4baa1acdb2f96b0ac29bc4f73fc1864e1d6ab6dfc1c0f7
MD5
bdfb8b684274cc085065407ae0f09227
Verdict
No known threat found
File type
PE Executable · 5.2 MB

Cite this report: https://app.malva.re/sha256/ad81d460e0a27345ec4baa1acdb2f96b0ac29bc4f73fc1864e1d6ab6dfc1c0f7

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
Portable Executable file
Size
5.41 MB · 5,409,664 B
First seen
2026-10-07 19:00 · 27 days ago
Last seen
2026-10-07 19:00 · 27 days ago
Last analysis
2026-10-07 19:00 · 27 days ago
Hashes
MD5 bdfb8b684274cc085065407ae0f09227 Sha1 dfe678dcccf2d17e964ff6d8ce079a0f1e72ae00 Sha256 ad81d460e0a27345ec4baa1acdb2f96b0ac29bc4f73fc1864e1d6ab6dfc1c0f7 Sha384 7c295a579f33b77d06322be42a40bd558f019e116adc2a6185e90c8f6a10e66441d4722717802de3aca97e32374e2574 Sha512 4016ee81e724d0b5e630daefceb2cbc6e176640896dfca3b2be5374a1155fa4341ff5bc9992e937f14781c1d4de515d0a30ee5b10272795224335c5ee7d48fe8 SSDeep 49152:S6kxf+5t2sLLGG1LKLxLUL0LJLJL0L+LXj5/OvoW0E56Y+l5GcZTKywY:O8/KFYAxFf TLSH FD462907668410E8C54BC37685B45A6A26F23C9D5732B78B0E94BE742F26BD27EF4F04
Detection
PeID
HQR data fileMicrosoft Visual C++ v6.0 DLLPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!

2 files
EXEbdfb8b684274cc085065407ae0f09227
Structure
P7B[Authenticode]_3c7ee4b4.p7b
STICH beta

No STICH Path has been generated for this analysis yet.

1 structural branch were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 1

Name Value
Info
Authenticode present at 0x526C00 size 8064 bytes

2 files
EXEbdfb8b684274cc085065407ae0f09227
Structure
P7B[Authenticode]_3c7ee4b4.p7b
No malware configuration was found at this point.
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙