Malicious
PE Executable
MD5: 26a6effd566f47815c6900b6aae2ca22
Size: 3.01 MB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Size
3.01 MB · 3,013,504 B
First seen
2026-07-01 19:02 · 3 months ago
Last seen
2026-07-01 19:02 · 3 months ago
Last analysis
2026-09-03 21:05 · one month ago
Hashes
MD5
26a6effd566f47815c6900b6aae2ca22
Sha1
e618398fde004ece90f65697c0e8ad7032fbca7d
Sha256
15bd2334d11f0058a578ea871b87637a8f918a39755b43976ba2d14c2fdb79c7
Sha384
ad14fe7dbff5d295c5e4f2135a36f320508f4a0f94a0079b57ef9324ae2914588f34ada0a169d78a5ad569b255a61684
Sha512
f88ce4fbe3228404014c0b4fd6e552178ff9eef7dfe379e1a23339ae9f534481ef03f3898667c7bad02c8ade645e0907e640531866ecf189eaf4ca899ccc477b
SSDeep
49152:XNtle7iyqlOBuCb+iN555FN6UORrMjZxdK5A:XNOyEn76U338m
TLSH
E6D58C0B6CD048EAE45AA73689B751827B74BC054F3263E72E80B3783E727D25D36B54
Detection
PeID
HQR data fileMicrosoft Visual C++ v6.0 DLLtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!
1 malicious · 2 files
EXE26a6effd566f47815c6900b6aae2ca22T1027 · T1055Vidar Stealer
Structure
P7B[Authenticode]_84ccaad5.p7b
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:exe~T1027~T1055>bin
Shape
pe:exe>bin
malicious
2 nodes
| Name | Value |
|---|---|
| Info | Authenticode present at 0x2DF200 size 2432 bytes |