Malicious
PE Executable
MD5: 222d979c43fe54adb1a7479982a3fa30
Size: 3.02 MB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Portable Executable file
Size
3.02 MB · 3,021,168 B
First seen
2026-07-04 07:46 · 3 months ago
Last seen
2026-07-04 07:46 · 3 months ago
Last analysis
2026-09-03 21:02 · one month ago
Hashes
MD5
222d979c43fe54adb1a7479982a3fa30
Sha1
dc182edfa40394392a1ada4925989e994a3db462
Sha256
24a86b9e58a4369e6c58d9b8185881a0a67987465ae18af1b7bbc7577cce724e
Sha384
114ecb0ba784d7a2bfd8b2208965036f6349174c6578cdeff5fd8ab622bdae1459e547c1cc6cba764ddd9089c3366482
Sha512
d532a76cfcdc780976ed3451ec157c1382469ed6583a86f5f9a7964823af171f098f068ae6b15a07d16f202c9bbc930fc7f2e98a2029b5fdaa54fdcb2d06cbf4
SSDeep
49152:6WtcgINOaOPuQ0mbxEPrFHblQmEWEaAM7+upGRjnKchH2sXaUgXGed:6Wb8Q0XHblQ5WEaAOR6jnKgHWUUGed
TLSH
CAE58D0B7D9009E9D0AAA33688B751967B75BC080F3627E72E90B3782F727D09D39754
Detection
PeID
HQR data fileMicrosoft Visual C++ v6.0 DLLPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!
1 malicious · 2 files
EXE222d979c43fe54adb1a7479982a3fa30T1027 · T1055Vidar Stealer
Structure
P7B[Authenticode]_d375339b.p7b
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:exe~T1027~T1055>bin
Shape
pe:exe>bin
malicious
2 nodes
| Name | Value |
|---|---|
| Info | Authenticode present at 0x2E1000 size 2416 bytes |