2b671ae081b1c69687d270a2040aa0fa

PE Executable

MD5: 2b671ae081b1c69687d270a2040aa0fa

Size: 6.45 MB

application/x-dosexec

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

File

Size

6.45 MB · 6,452,400 B

First seen

2026-08-11 20:16 · 2 months ago

Last seen

2026-08-11 20:16 · 2 months ago

Last analysis

2026-09-03 21:05 · one month ago

Hashes

MD5 2b671ae081b1c69687d270a2040aa0fa Sha1 6cd1474d66f84e4e6b9fdbd306437c406e0bca35 Sha256 f1dc89bb9d9f7d34c111ac1df118d0b675d2aed1bbfeef21201e9e9dfcad2241 Sha384 f79347841d6c74550c92d3ad6baa39a55a32c6e71dfb045bc2cc615ad2b5eacb7880e0f88e4f283bd0e28ed9b7df89f8 Sha512 077ea90013a4037498466dd1054045a88bc4b999dbbaff8247741f0de48a88dfd3ee6fd558de0aff0285796d8ff7d706fdbf574dfa14d2b39189f2d2fc6c09f6 SSDeep 98304:sgZqynBfb7a3AVQNYY65jpbbxPqaoGvuB7lL7rn6Tac2r:sgcCBfb7a3cQNL65jBJWrnD TLSH B9564A17EE5198B5C15AE634C57682096A64F88C8B3137E31EB1AFB23F263F15E35B04

Detection

PeID

HQR data fileMicrosoft Visual C++ v6.0 DLLPrivate EXE Protector V2.30-V2.3X -> SetiSoft Team

1 malicious · 2 files

EXE2b671ae081b1c69687d270a2040aa0faVidar Stealer

Structure

P7B[Authenticode]_5a2ee670.p7b

BIN(folder)

BIN4

BIN19

BIN31

BIN45

BIN57

BIN70

BIN81

BIN92

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:dll~T1027~T1055>bin

Shape pe:dll>bin

malicious 2 nodes

Name	Value
Info	Authenticode present at 0x626B50 size 2400 bytes

1 malicious · 2 files

EXE2b671ae081b1c69687d270a2040aa0faVidar Stealer

Structure

P7B[Authenticode]_5a2ee670.p7b

BIN(folder)

No malware configuration was found at this point.