Local reference
Suspicious dependency
Inferred
Mal-ecule
H(Os)Md(Bi)
Objectives
component severity, 70% confident.
anti-static/obfuscation/payload
HKCU\Software path string
component severity, 100% confident.
command-and-control/dropper/execution
Borland Delphi RTL registry key string
component severity, 95% confident.
evasion/indicator-removal
Regex component marker
component severity, 85% confident.
evasion/masquerade
PE lacks VS_VERSION_INFO resource
component severity, 95% confident.
evasion/masquerade/file
Filename has EXE extension
component severity, 86% confident.
exfiltration/messaging
Notification config wording
Micro-behaviors
notable severity, 90% confident.
os/sysinfo
Query disk free space
component severity, 80% confident.
communications/http/client
Regex component marker
component severity, 90% confident.
os/api-resolution
Kernel32 DLL resolution string
Metadata
notable severity, 85% confident.
binary/metrics
PE with malformed section layout
baseline severity, 92% confident.
binary
UHARC linker major version
component severity, 80% confident.
binary/anomaly
CompanyName field absent from PE version info
component severity, 90% confident.
binary/section
Tiny C string section ratio
Identity
| SHA-256 | b8f20daab3783f977a4783523e35fc2141c1d563dafb4e47e553b0acdd563afe |
|---|---|
| Filename | b8f20daab3783f977a4783523e35fc2141c1d563dafb4e47e553b0acdd563afe.exe |
Origin
| Source | harvest |
|---|
Timeline
| First seen | 13 May 2026 19:15 UTC |
|---|---|
| First analyzed | 31 May 2026 00:19 UTC |
| Last analyzed | 31 May 2026 00:19 UTC |
| Last updated | 31 May 2026 00:19 UTC |
Labeling
| Label | bad |
|---|---|
| Label source | harvest |
| Traits version | 52045 |
Not seeing what you expected? Let us know