Deep Malware Analysis of 3d837d8a85ef40f020daf73f910f9c00 | md5: 3d837d8a85ef40f020daf73f910f9c00 | Vidar Stealer | Go Loader (Factory-v3) | T1027 | T1055 | Executable | PE (Portable Executable) | PE File Layout | Win 64 Exe | x64

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	3d837d8a85ef40f020daf73f910f9c00
Sha1	96b29a6ebcda9fe97d0299ab492dc7de1e78bff4
Sha256	b928bbab41b557aada3cc35539fef1f219e32afefdca9178e24c204b120b122e
Sha384	188075619127951beb94fe74b82cfc3252b91d16164222189205752359804780b9ea225e58df7eb12df283797002b4ef
Sha512	3b1d7ea3fe83228a3e77ce24f759c828ab3550b1dee8a2f17c3cc94cc589add142709adbcfbb4e3ee418863bf01a9154d5b6f002cdb00900d474e29ffd585cce
SSDeep	49152:PzkibqKS5uPwK3hfMyzLSJ8uFhYm6ZkKZkJjK3zDCXCpjrNcfuyHHj3E2zTnfKiD:PVrTBPdYGZkakwzm3uyHzE0L7gUN0E1
TLSH	FB563907ECA555E5C0AAE235896B9253BB617C481F3123D72BA0F7382F76BD06E79700

PeID

HQR data fileMicrosoft Visual C++ v6.0 DLLPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:exe~T1027~T1055

Shape pe:exe

malicious 1 nodes

Name	Value
Info	PE Detect: PeReader OK (file layout)