Deep Malware Analysis of 569a136e7fcdba7a38a81eab4575c3f5 | md5: 569a136e7fcdba7a38a81eab4575c3f5 | Vidar Stealer | Go Loader (Factory-v3) | T1027 | T1055 | Executable | PE (Portable Executable) | PE File Layout | Win 64 Exe | x64

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	569a136e7fcdba7a38a81eab4575c3f5
Sha1	f078f15f2c7fb915b90773410d67586f4f1f02d1
Sha256	4cc638ef185695de266f975822be7b9f32670585b8a554b9a6a0d7b745c69a0d
Sha384	98fc3d06467ab424ba4b1c1039b50bef1143f44cb822a5bf226313736d42b56b85ace2cfe5396081d14e0bd72c7e736f
Sha512	3810293f8cdcc05d7236371db6e376557bca0e502bd4b43cddc990c8afe65fe5ccea9eb6511c76fdf57792e63b3e4d2eaa766cdc1f87391f60bd67f7cf36f08d
SSDeep	49152:eEf7sjiJw1RwBr97A4AYg8a1wkiugrzJDku2nD4hpTDOlT4LVUqchxgHN47SoSqO:eUP528afMob4XiqLVUqchxgHhUC
TLSH	31A68C13ADA548F9C0A6E335C8B7514ABA30B84C5B3427D32E90EE782FB23D15E36755

PeID

HQR data fileMicrosoft Visual C++ v6.0 DLLPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:exe~T1027~T1055>bin

Shape pe:exe>bin

malicious 2 nodes

Name	Value
Info	PE Detect: PeReader OK (file layout)
Info	Overlay extracted: Overlay_46c4f7de.bin (4824064 bytes)