Deep Malware Analysis of 56f388baa04715070f588ca6d725e416 | md5: 56f388baa04715070f588ca6d725e416 | Executable | PE (Portable Executable) | Vidar Stealer | Go Loader (Factory-v3) | T1027 | T1055 | PE File Layout | Win 32 Exe | x86

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	56f388baa04715070f588ca6d725e416
Sha1	3242568f64275495aa6d7a7fc04afc53b0c1ea62
Sha256	aba7778d25f569377be922392bc03b3b8faacabeb7e2844acd9f7d0c2d4bc433
Sha384	6fbe8247f40aa38c7ac48ed999c43218b434a363e0c36c2195b078a198716d2aaf5ee92b8b7709208a511c6917b6290f
Sha512	c63280119d169e6aa579c1f9af644cb19f508452c2ee0c0896832b020698f2fbf04df1fae78b3a776a773c4eba73f00fd838558cd116eb234d84695d7aa9d29a
SSDeep	196608:5CHTCiRlE3v0fqObnd0N/Lfmun5JOneSrbnQ5Z5sTjVY:at2sSKnd0VLue/OneUgsdY
TLSH	F1E6BD02FE8B64F5E5030932046BB36F63356E018B25CBD7EB447F29ED772922976249

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:exe~T1027~T1055

Shape pe:exe

malicious 1 nodes

Name	Value
Info	PE Detect: PeReader OK (file layout)