Malicious
PE Executable
MD5: 36fdf6ce9390cb8a246d22e3edd7f1a3
Size: 9.37 MB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Size
9.37 MB · 9,371,056 B
First seen
2026-09-01 15:00 · one month ago
Last seen
2026-09-01 15:00 · one month ago
Last analysis
2026-09-03 21:05 · one month ago
Hashes
MD5
36fdf6ce9390cb8a246d22e3edd7f1a3
Sha1
3ccb1621f6f3001a18f572f7a6cd1bb1e3706bff
Sha256
ebcedb12d86801de120b4d681702f46af46fbcee129b00ca1ba64b93aa859869
Sha384
16b8dedbe23c5755128ebaabae3a477c194e6119e451517c523593a52172d313f84beb5ecac2dfec2616742eac4471ab
Sha512
c04e8cb2d7765f896a58aa9d50e1ccf0db2fe157123d3e02741440ac3edf6f003db5c76156644f1c2324444454117b5c3c9c71603294a324773a80a81e3c78b4
SSDeep
98304:eyXRHIgOmBag1b9dMFqlzSPob5sIezEdF:eyXRHIgOmBaO9d3l5yU
TLSH
32967C077A059094D196DE38C0B60A45A234BC8D873537EB3FA1AEB47F61BC2A736F54
Detection
PeID
HQR data fileMicrosoft Visual C++ v6.0 DLLPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamUPolyX 0.3 -> delikontElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!
1 malicious · 2 files
EXE36fdf6ce9390cb8a246d22e3edd7f1a3T1027 · T1055Vidar Stealer
Structure
P7B[Authenticode]_9903e690.p7b
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:exe~T1027~T1055>bin
Shape
pe:exe>bin
malicious
2 nodes
| Name | Value |
|---|---|
| Info | Authenticode present at 0x8EDE00 size 8112 bytes |