Deep Malware Analysis of 1165054a97d94f6bc83ef4131b6dc671 | md5: 1165054a97d94f6bc83ef4131b6dc671 | Vidar Stealer | Go Loader (Factory-v3) | T1027 | T1055 | Executable | PE (Portable Executable) | PE File Layout | Win 64 Exe | x64

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	1165054a97d94f6bc83ef4131b6dc671
Sha1	1f0f7d155968e53fcf68450e7f6ae7467f5f45db
Sha256	0e0211e18fb57fc22eeffcb2b9adbffef23a44f71e1836438f18cc81a7c9833d
Sha384	0de02e1510cd86c098f04e3a3778c2a05b37742fa1281d967a99320e4d875fcf582c3a653e42d525159d41d91a01278b
Sha512	e0ffdabad03594ab15f9f7ecab9ca05313c7994d9d691a17ef5a51fbb55298028a366b6e499c6d409dda79185e9a98697cbe35662a412b70aff58221fe246357
SSDeep	49152:KrQZ+MxsIQi2zfPsuWvzMp7M7J63CVgAW1zMJOxP:KrtdP64p7M96VAW1zQOxP
TLSH	9B069D07FD915DA2D0A66731887A12917B3DBC08AB3A37E71E50B2762F763C24C75B18

PeID

HQR data fileMicrosoft Visual C++ v6.0 DLLPrivate EXE Protector V2.30-V2.3X -> SetiSoft Team

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:dll~T1027~T1055>bin

Shape pe:dll>bin

malicious 2 nodes

Name	Value
Info	PE Detect: PeReader OK (file layout)
Info	Authenticode present at 0x3B3920 size 2416 bytes