Malicious
PE Executable
MD5: 5a3c212e877c4a9d765897fd3be92a15
Size: 4.73 MB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Size
4.73 MB · 4,726,648 B
First seen
2026-08-11 23:46 · 2 months ago
Last seen
2026-08-11 23:46 · 2 months ago
Last analysis
2026-09-03 21:08 · one month ago
Hashes
MD5
5a3c212e877c4a9d765897fd3be92a15
Sha1
4d074c798eee5f3067ea6e2f1ea4006e6451d208
Sha256
e407b6a1e7b9b1d65b1f5c9ee5582799129c11462ec30249800b35328a0bc157
Sha384
58f32f0a9a7bae8916e9ade2dffcd305aea0b88c11872bff8655a565c1606bd163911c15635e313027357ff8ce52957c
Sha512
53be36d0b03bf8e122784a7954c19bfb2ab00562528ff6b882f437ca665051be33289fb847f1f42728e654bfba19bcb5956a69e8e5d30b9fabe0c048b7f6e37b
SSDeep
49152:falS6sZkZTE6OZn3r5goO4TNO8XPcNMg2iAPncU4Vj6ZNpfg1AJyou:fr6G3r8kNqKBiAPcFjcjSfou
TLSH
71267B03BE9548F5C195E73189774252BA74BC4C8B3133E32E60AAB82F763C06E79B55
Detection
PeID
HQR data fileMicrosoft Visual C++ v6.0 DLLPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!
1 malicious · 2 files
EXE5a3c212e877c4a9d765897fd3be92a15T1027 · T1055Vidar Stealer
Structure
P7B[Authenticode]_0f8032ca.p7b
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:exe~T1027~T1055>bin
Shape
pe:exe>bin
malicious
2 nodes
| Name | Value |
|---|---|
| Info | Authenticode present at 0x481600 size 2424 bytes |