Malicious
PE Executable
MD5: 131edfa111ab4f6afe31801f77e28f6b
Size: 14.12 MB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Portable Executable file
Size
14.12 MB · 14,121,880 B
First seen
2026-09-04 10:00 · one month ago
Last seen
2026-09-04 10:00 · one month ago
Last analysis
2026-09-04 10:00 · one month ago
Hashes
MD5
131edfa111ab4f6afe31801f77e28f6b
Sha1
6c36899c45c759d64aedfd92d452a649be463c9c
Sha256
0947a9428b88899e5b5febf7b9feab7782e156d9bbf8b5b64a863b3c461c688e
Sha384
2b2d1c6966f06a0b521c905acd47e412f7af5bf616b16744642c8cd80cec56965d9854bc756c5469f5a0c5094c619772
Sha512
125ffde43237ffb91319f1b13f6e76b9ba7e9bf96680793fcd1a3bb61911e120a03f33822b3db0eac2f856f072533959815df568b5b68d89b4cdf0a5db60e146
SSDeep
393216:baL5AKknLymQA+8WyM3L643FKnMIv0LJWRdVr4KdxuXO7raPyzaSJeiMKtN72gjF:dz
TLSH
4FE66BC3AA4644E7C5819F39C0775331BAA9B88FC73037B76E549AB42F223D0A979744
Detection
PeID
HQR data fileMicrosoft Visual C++ v6.0 DLLPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!
1 malicious · 2 files
EXE131edfa111ab4f6afe31801f77e28f6bT1027 · T1055Vidar Stealer
Structure
P7B[Authenticode]_bc92b732.p7b
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:exe~T1027~T1055>bin
Shape
pe:exe>bin
malicious
2 nodes
| Name | Value |
|---|---|
| Info | Authenticode present at 0xD75C00 size 8088 bytes |