Deep Malware Analysis of 475ed57690ae55a669147ac521ea3416 | md5: 475ed57690ae55a669147ac521ea3416 | Executable | PE (Portable Executable) | Vidar Stealer | Go Loader (Factory-v3) | T1027 | T1055 | PE File Layout | Win 64 Exe | x64

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	475ed57690ae55a669147ac521ea3416
Sha1	58310d8f035d970733b95919d7e39cd03f4f67fb
Sha256	83075e6f511d4b63e5bbeabd397321a77b80bbf3521c708cbc96587a4d0091ab
Sha384	6502c005d3c7a39903ede67ccb1d37deb54ba97f210b00b37ea90a96a70323764c643c8b10035c8fd649cd1499719fca
Sha512	edbaaf17ae8a1eecf0bdccd83c254214ae3690a9330ea8b25b50affc8b5ce91574791e4f76b6286e36f8b89bf52ec7e3b223f832ed83415a813639a38d42e023
SSDeep	393216:4iCNO3v23m0VDvzbwwsNj4Sr+SPKyVM7IYRmsD9lEvORgwtAX4pa6+xsTMgZzfW6:O
TLSH	08E65BC3AA4640F7C5619B39827792B1BA6DB84FC73433B72E6096B42F313D0A979744

PeID

HQR data fileMicrosoft Visual C++ v6.0 DLLPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:exe~T1027~T1055

Shape pe:exe

malicious 1 nodes

Name	Value
Info	PE Detect: PeReader OK (file layout)