Malicious
PE Executable
MD5: 28a68370e62fc893cadac0d307db6771
Size: 9.33 MB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Size
9.33 MB · 9,334,704 B
First seen
2026-09-01 12:30 · one month ago
Last seen
2026-09-01 12:30 · one month ago
Last analysis
2026-09-03 21:05 · one month ago
Hashes
MD5
28a68370e62fc893cadac0d307db6771
Sha1
0190d84dbb18907e952863552c6c032fb7de53c7
Sha256
29d4563a365a0a6a49eefafecd1a46934b9d07df340ddd23da81ce35e4b92276
Sha384
b502a55b152ef15c3ad7db8dfa69eab7519e26087a0ac6d25817849d8c8e799d1b10cdcc4ad9c96e471e4b8aa4f6690d
Sha512
b7a4f13b41df7039218c7d48039b7dbb41abad9cd3d604becddc90e39f57cb235a171bb7c5cdf728d323c256f5e146198cb353b485b831b3d7581cf9c2be8708
SSDeep
49152:AVmvjlnNlRlMLlTFkKm+tKdlH76hfqTb1f4WLWFn6f9xbM8BTLKO+DwUP:A4rScYKbHOh9Fno9xA8tDZw
TLSH
22966C077A4494A4D096DE38C5BA0A51B134BC8D87353BDB3EA1BEB4BF217D19236F84
Detection
PeID
HQR data fileMicrosoft Visual C++ v6.0 DLLPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!
1 malicious · 2 files
EXE28a68370e62fc893cadac0d307db6771T1027 · T1055Vidar Stealer
Structure
P7B[Authenticode]_939cb05f.p7b
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:exe~T1027~T1055>bin
Shape
pe:exe>bin
malicious
2 nodes
| Name | Value |
|---|---|
| Info | Authenticode present at 0x8E5000 size 8112 bytes |