Deep Malware Analysis of 35ec690a3ffff6dc3fd104e644bb2c13 | md5: 35ec690a3ffff6dc3fd104e644bb2c13 | Vidar | Go Loader (Factory-v3) | T1027 | T1055 | Executable | PE (Portable Executable) | PE File Layout | Win 64 Exe | x64

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	35ec690a3ffff6dc3fd104e644bb2c13
Sha1	1af0aa4a6a979b6f8216964db4c19269dcdc6135
Sha256	8ec9b81c2be13a2a89158a3b7d11628543a939d68b59dcccd56c722a57a1647b
Sha384	402b28a47f1fa404168e24f1d68f615ae930a60491d2ca6056c4636ed50eb06f4b981603ac160bfd3d5435e4ef9753ec
Sha512	dab8fa1e696ad2f177cfa4b1a845fe47b848e49bcbb66e1810363165d947edffd66d766bd77137fa8dc6a55ccdace6c9ee1f3869dd2ce7ae16c59ebe95168eac
SSDeep	49152:vWPOZeN5DfoR4ZBY9WwPUX3CkiJC0zYRThVHQEOCSxaZTZpvALZIqzXTw5xa1jKi:vbXGvY/W32IHICo9hzc72j9
TLSH	57467C4B7D916569C9669B38E43B43617B60BCCCC73177A32E90A6702F207C06EFAB15

PeID

HQR data fileMicrosoft Visual C++ v6.0 DLLPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:exe~T1027~T1055>bin

Shape pe:exe>bin

malicious 2 nodes

Name	Value
Info	PE Detect: PeReader OK (file layout)
Info	Authenticode present at 0x572200 size 8104 bytes