Malicious
PE Executable
MD5: 542645f0e2e8e3cf19bfed6e49c59dff
Size: 4.2 MB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Size
4.2 MB · 4,202,352 B
First seen
2026-08-11 19:32 · 2 months ago
Last seen
2026-08-11 19:32 · 2 months ago
Last analysis
2026-09-03 21:08 · one month ago
Hashes
MD5
542645f0e2e8e3cf19bfed6e49c59dff
Sha1
2b3b590311414899bebee3c2869877c1472d57e1
Sha256
dbfaa0da054b079861be57859df2b280252e6ab88c9f2c190c09a6f16f2da54d
Sha384
945f941911143dd0a5ffbcc8ca3d0d9f43e80a530e3f9f9e565fd5a7446c4276ab7611cfd0682e72d7ad3a5e4df79524
Sha512
fa42353de628df23a88700874a1d299343e07b230c09f82e4ef43504a070839e2cb965f1d3074725f821fb550fbf42bbc98f255077e8a9999ebd7d6180d76572
SSDeep
49152:DZ6zpfT4dot5kdW6b2P07GZQzmbPNM8ekrLGqqCNBC2W4XG4tj7H1cvA4PM3s1TP:DKNFLGpCN4qHevjLp
TLSH
85166B07AE9109FAC099A735C8B75252BAB0BC4C4B3273D32E607A742F767D06D39B54
Detection
PeID
HQR data fileMicrosoft Visual C++ v6.0 DLLPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!
1 malicious · 2 files
EXE542645f0e2e8e3cf19bfed6e49c59dffT1027 · T1055Vidar Stealer
Structure
P7B[Authenticode]_b3e66e7c.p7b
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:exe~T1027~T1055>bin
Shape
pe:exe>bin
malicious
2 nodes
| Name | Value |
|---|---|
| Info | Authenticode present at 0x401600 size 2416 bytes |