Deep Malware Analysis of 052c8319598720de5311192713bedeb1 | md5: 052c8319598720de5311192713bedeb1 | Executable | PE (Portable Executable) | PE File Layout | Win 64 Exe | x64 | Vidar Stealer | Go Loader (Factory-v3) | T1027 | T1055

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	052c8319598720de5311192713bedeb1
Sha1	db42b917169884c3b02805c93bad28fd70c88a04
Sha256	1cd5a0cf98f8fb954c101378397e6ecf57df5c8e94a8056ee375d0ff66bceb59
Sha384	a778cac989a2e887fd2234f1799e5df33ca46bce0d1876af54f0b521b856add66cb07931ce83b1f72ea5be412da953e3
Sha512	360a2c77d4a411a740d4606a33536d464cec2c31672004cf08c5e2e773c867f2aec815224e48ee5695e3ac24e6a3ee8328c7dc5734cf25eca3bcc0dc62a85af6
SSDeep	196608:Q0+5A77CJaixdRrPe6rAg9OK4JT7eIPWR2:QDA77CzRr/5R2
TLSH	70966D07ED901DE9C1E9A23589B68153BB747C594B3263DB2BA0F7382E77BC06A75310

PeID

HQR data fileMicrosoft Visual C++ v6.0 DLLPe123 v2006.4.4-4.12Private EXE Protector V2.30-V2.3X -> SetiSoft Team

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:dll~T1027~T1055>bin

Shape pe:dll>bin

malicious 2 nodes

Name	Value
Info	PE Detect: PeReader OK (file layout)
Info	Authenticode present at 0x84C4E8 size 2416 bytes