Malicious
1ccc42460b533ae4c041d49be53962c3
PE Executable
MD5: 1ccc42460b533ae4c041d49be53962c3
Size: 1.75 MB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan
This sample is a 1.7 MB PE Executable identified by Malva.RE as Vidar Stealer (stealer). It matches 2 YARA rules. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 6d68d0a96c8bc726cbe3bf6f6253fb0ccae50627e966b8606f3582ef65eacec7
- MD5
- 1ccc42460b533ae4c041d49be53962c3
- Verdict
- Malicious
- File type
- PE Executable · 1.7 MB
- Family
- Vidar Stealer
- Category
- Stealer
Cite this report: https://app.malva.re/sha256/6d68d0a96c8bc726cbe3bf6f6253fb0ccae50627e966b8606f3582ef65eacec7
Related Vidar Stealer samples
- 925a9d35a32e1a6a1ce1ae4b9ff09e289184d4d925d700752c99f15ab04296dd 2026-11-01
- c96f81d0ddbc29f0315c4b0809d97e280051a016b6a6852e5bd88e1a6ec235bc 2026-10-29
- f0f686989d043a10a7f5ee442fc97877ac52b9baf16b4cdca1191dd9631efc4c 2026-10-29
- d515d3eeb16636e316345494bf98a312b59bb7f5c226faa6c64ca2e6980f3185 2026-10-28
- 9758f758b221d0ab47e831ce9ec8dee2e8d9fbb58d3c91b0ce056fa1f6fa0cfd 2026-10-28
- 830fdb947aa60a491d22c8f698e9531fdd651f76cecafd3350d408442db4c59e 2026-10-28
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Size
1.75 MB · 1,747,456 B
First seen
2026-11-01 12:00 · 14 hours ago
Last seen
2026-11-01 12:00 · 14 hours ago
Last analysis
2026-11-01 12:00 · 14 hours ago
Hashes
MD5
1ccc42460b533ae4c041d49be53962c3
Sha1
db585b9371624e64e7cc6d67bfd54d8a344cbf5e
Sha256
6d68d0a96c8bc726cbe3bf6f6253fb0ccae50627e966b8606f3582ef65eacec7
Sha384
bb01ca45f78fdc5cc12aaa6886af7cdc5ce3dcaa817d9bc1e5c1e61a2af4191774f78c077adefe1bc521f35587d00c0a
Sha512
e717631848e6fea9976ba5da349953fcb760b4e4a72600921f14a54a211a2c3a7bbee1191ab84a496c87479eba54985cd9c05309b9edac7e6fc5483f998e4b49
SSDeep
24576:gR772QzPrhhieDQeR74F66JhBVrq9IyAAgmWyZs0Bg6CPDF6z1migx:B9QlpCPBgQ
TLSH
F485D547E7B651E4D8FAC1398666722BBC71385983349BD797808A474B62FF0E93E340
Detection
PeID
MASM/TASM - sig4 (h)Microsoft Visual C++ 8.0Microsoft Visual C++ 8.0 (DLL)Microsoft Visual C++ v6.0 DLLPe123 v2006.4.4-4.12
1 malicious · 1 file
EXE1ccc42460b533ae4c041d49be53962c3Vidar Stealer
Structure
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:exe
Shape
pe:exe
1 nodes
1 malicious · 1 file
EXE1ccc42460b533ae4c041d49be53962c3Vidar Stealer
Structure
No malware configuration was found at this point.
Sign in or create a free account to view the matching YARA rules.
Create a free account