Suspect
PE Executable
MD5: c4e4c6a57958b8caf47e063ffb387718
Size: 5.01 MB
application/x-dosexec
This sample is a 4.8 MB PE Executable for which Malva.RE's static analysis did not establish a malicious verdict. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- c0b0f25e2f9af6cc4ff98e5c32410c56f044c92953853efdc953c487f21aaa56
- MD5
- c4e4c6a57958b8caf47e063ffb387718
- Verdict
- Inconclusive
- File type
- PE Executable · 4.8 MB
Cite this report: https://app.malva.re/sha256/c0b0f25e2f9af6cc4ff98e5c32410c56f044c92953853efdc953c487f21aaa56
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Portable Executable file
Size
5.01 MB · 5,012,992 B
First seen
2026-10-13 15:45 · 19 days ago
Last seen
2026-10-13 15:45 · 19 days ago
Last analysis
2026-10-13 15:45 · 19 days ago
Hashes
MD5
c4e4c6a57958b8caf47e063ffb387718
Sha1
8082abfea3db7c007f64a99d73d293eb37be4657
Sha256
c0b0f25e2f9af6cc4ff98e5c32410c56f044c92953853efdc953c487f21aaa56
Sha384
7899c2582621d421bb2cd53977c9a5b08889d0dcfdc081ef2a8847341736e5f9ff8505a91dbbd5bdefa391551743259b
Sha512
bc762c701eae0e16bc82e9f4e5df61799f9529ea6ea6d06e1df739e2336e0f79f6374c69ef99fbca6f1d5329236fc0534d19b8910a2066d5d8a1dc53604f22f0
SSDeep
49152:CtSO/44Yf6W7PjXaEyPvAiJHIraXtF+frcr75EKDGCKTkqV9qebyHUTr4:Cd/YXPEvABaXt8aEVr3qozr
TLSH
CC363917EC9145A5C0EEE6348966D253BE717C485B3123D32BA0F7782F72BD0AAB9344
Detection
PeID
HQR data fileMicrosoft Visual C++ v6.0 DLLPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!
1 file
EXEc4e4c6a57958b8caf47e063ffb387718
Structure
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:exe
Shape
pe:exe
1 nodes