Malicious
PE Executable
MD5: 2b671ae081b1c69687d270a2040aa0fa
Size: 6.45 MB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Size
6.45 MB · 6,452,400 B
First seen
2026-08-11 20:16 · 2 months ago
Last seen
2026-08-11 20:16 · 2 months ago
Last analysis
2026-09-03 21:05 · one month ago
Hashes
MD5
2b671ae081b1c69687d270a2040aa0fa
Sha1
6cd1474d66f84e4e6b9fdbd306437c406e0bca35
Sha256
f1dc89bb9d9f7d34c111ac1df118d0b675d2aed1bbfeef21201e9e9dfcad2241
Sha384
f79347841d6c74550c92d3ad6baa39a55a32c6e71dfb045bc2cc615ad2b5eacb7880e0f88e4f283bd0e28ed9b7df89f8
Sha512
077ea90013a4037498466dd1054045a88bc4b999dbbaff8247741f0de48a88dfd3ee6fd558de0aff0285796d8ff7d706fdbf574dfa14d2b39189f2d2fc6c09f6
SSDeep
98304:sgZqynBfb7a3AVQNYY65jpbbxPqaoGvuB7lL7rn6Tac2r:sgcCBfb7a3cQNL65jBJWrnD
TLSH
B9564A17EE5198B5C15AE634C57682096A64F88C8B3137E31EB1AFB23F263F15E35B04
Detection
PeID
HQR data fileMicrosoft Visual C++ v6.0 DLLPrivate EXE Protector V2.30-V2.3X -> SetiSoft Team
1 malicious · 2 files
EXE2b671ae081b1c69687d270a2040aa0faT1027 · T1055Vidar Stealer
Structure
P7B[Authenticode]_5a2ee670.p7b
BIN(folder)
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:dll~T1027~T1055>bin
Shape
pe:dll>bin
malicious
2 nodes
| Name | Value |
|---|---|
| Info | Authenticode present at 0x626B50 size 2400 bytes |