Deep Malware Analysis of 03bfe86efe6099a28a6c823f8fc2ddab | md5: 03bfe86efe6099a28a6c823f8fc2ddab | Executable | PE (Portable Executable) | Vidar Stealer | Go Loader (Factory-v3) | T1027 | T1055 | PE File Layout | Win 64 Exe | x64

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	03bfe86efe6099a28a6c823f8fc2ddab
Sha1	08a88554d1d8398a03757784be4342a2fbb1ffe0
Sha256	46d971c67b100586766b5384bfa4025dfecff8b7c2abf172180895007728d46d
Sha384	0cd09941a16a167d2c393a6caf4a5a8cc29539a78432380b439c63da726c5cee4489654f8133c8afb6306ce79cad1e8c
Sha512	8ef4788fe0adbf94c7ba4b0252695ef023ca88e21d699fe8285b5e712875effad2492cf9e00d85cb10e7dd01d2113f9e4b8b1cd6b672a7756961ce57fb2acfa0
SSDeep	24576:ltn63fpVjCUZf3NEb0hXxmCZ9mxALL8vynrcS+csboKVWXP2eleyE9Dl7c2ctO4H:lJ6PptCK3NpjmCPmxEYvyrmH9m
TLSH	59F54A07FCA519E5C1AAA2318966A152BB717C482F3123D73F50B7B82F72BD06DB9710

PeID

HQR data fileMicrosoft Visual C++ v6.0 DLLPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:exe~T1027~T1055

Shape pe:exe

malicious 1 nodes

Name	Value
Info	PE Detect: PeReader OK (file layout)