Malicious
PE Executable
MD5: 28d4eaf220b15d9e224e579de90ebf44
Size: 4.96 MB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Size
4.96 MB · 4,964,224 B
First seen
2026-08-11 14:17 · 2 months ago
Last seen
2026-08-11 14:17 · 2 months ago
Last analysis
2026-09-03 21:05 · one month ago
Hashes
MD5
28d4eaf220b15d9e224e579de90ebf44
Sha1
a045018b3f997df66d22af9c9e28496be1514fc4
Sha256
2e2420cd6378de828f9ae524f357ab6135107a2f5864e8d7858a200d5b3a29fa
Sha384
b14ed62caef3840354d2f4753bce1520a5de54aed3a8786c82276d07bf4e51626cfb572d35ad4a2a180d6f1fa3715dbe
Sha512
5564e63ca1cff0a717b7871736264a42a931c438dcd34bcc1fde4ef9933b0bab64824aaf6d6986cbcf22e61205880fdcd86070014c858fff88ae0825b615f701
SSDeep
49152:wdy6aMpzDt819czgwq6dSmFYireX2Cgv9JoMADPkyu:ws2ha/X2CgFqMmPm
TLSH
CB365A17BE9048FAC0A9E735C4BB5259B670B84D8B3123D32E516EB82F723C16E75B50
Detection
PeID
HQR data fileMicrosoft Visual C++ v6.0 DLLPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!
1 malicious · 2 files
EXE28d4eaf220b15d9e224e579de90ebf44T1027 · T1055Vidar Stealer
Structure
P7B[Authenticode]_87e2be51.p7b
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:exe~T1027~T1055>bin
Shape
pe:exe>bin
malicious
2 nodes
| Name | Value |
|---|---|
| Info | Authenticode present at 0x4BB600 size 2432 bytes |