Malicious
Malicious

4cb32af454ffb90522b70ce0a9585685

PE Executable
MD5: 4cb32af454ffb90522b70ce0a9585685
Size: 4.24 MB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
File
Size
4.24 MB · 4,235,336 B
First seen
2026-08-11 11:46 · 2 months ago
Last seen
2026-08-11 11:46 · 2 months ago
Last analysis
2026-09-03 21:08 · one month ago
Hashes
MD5 4cb32af454ffb90522b70ce0a9585685 Sha1 f628ffd3586f8703177404d8844bea18506b79f7 Sha256 6cb6186226f28dccb2fb06abf7a7d0cf6348b0f5980aa54361bdcc44c0d8014c Sha384 415baffb560765a9cb6d3556fe36b51597d2d3edb026bc85c5f82802fff394f1f0a65560406d01de6da8bf83db5a2d7f Sha512 1d97abfd0a4c9fa6062c8118de6ba4b23822e7fbc614e50e4705f65a34edba43366e01e3d6f0d44e0368c28b7ead2ed0dfd75e750a722a8999a8327932d77607 SSDeep 49152:zMqdkV7XVfR+gGfNAAM9uw1NS1+NgM7WUxDYiDYKh5gBhpacTAQ5FApo3PC:zSYrSDSk0uu9XAyPC TLSH E2169C43BC9019BCD499B33088B352457B78B84A1B3227D71EA17B3A2E77BD19DB6350
Detection
PeID
HQR data fileMicrosoft Visual C++ v6.0 DLL
1 malicious · 2 files
EXE4cb32af454ffb90522b70ce0a9585685Vidar Stealer
Structure
P7B[Authenticode]_d319a39c.p7b
BIN(folder)
BIN4
BIN19
BIN31
BIN45
BIN57
BIN70
BIN81
BIN92
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path pe:dll~T1027~T1055>bin
Shape pe:dll>bin
malicious 2 nodes
Name Value
Info
Authenticode present at 0x4096B0 size 2456 bytes
1 malicious · 2 files
EXE4cb32af454ffb90522b70ce0a9585685Vidar Stealer
Structure
P7B[Authenticode]_d319a39c.p7b
No malware configuration was found at this point.
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙