5aaf019a7ffe5d95f28716cfaa0a78ce

PE Executable

MD5: 5aaf019a7ffe5d95f28716cfaa0a78ce

Size: 6.62 MB

application/x-dosexec

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

File

Type

Portable Executable file

Size

6.62 MB · 6,622,568 B

First seen

2026-07-01 18:02 · 3 months ago

Last seen

2026-07-01 18:02 · 3 months ago

Last analysis

2026-09-03 21:08 · one month ago

Hashes

MD5 5aaf019a7ffe5d95f28716cfaa0a78ce Sha1 7f2e3c6ff42f4e780a44754aae8596f221220b5c Sha256 610ea665c294db66576d24a622c3b6daab59dbe14bb5281b6b1ada81fbab9bce Sha384 09f45d0c948166d311187388e6331aa7f2ff25e0ff3c828840624636d1b5f757f6ba7ba40ceb83a34e2c9baed32c65cd Sha512 a3d5521dd571210761298d62edac58547d12d627311480b643c55b184e852dec53ca60ce01416c0c10c3fc9bb68214eac4216b8bcc3ef8dd4ffcec272e290090 SSDeep 49152:MpwEW6URqsmtvOGEoGlQWrMq4SzWYArNnXCtpsAi5Gl/5SEYI4u:MYplQWrlzWbNXCDsxGlB9h TLSH 41667B077DE018E5D09EA23189A7925A3B35BC080F3167E72E50B7782F763D05D79BA8

Detection

PeID

HQR data fileMicrosoft Visual C++ v6.0 DLLtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!

1 malicious · 2 files

EXE5aaf019a7ffe5d95f28716cfaa0a78ceVidar Stealer

Structure

P7B[Authenticode]_14efb2fb.p7b

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:exe~T1027~T1055>bin

Shape pe:exe>bin

malicious 2 nodes

Name	Value
Info	Authenticode present at 0x650400 size 2408 bytes

1 malicious · 2 files

EXE5aaf019a7ffe5d95f28716cfaa0a78ceVidar Stealer

Structure

P7B[Authenticode]_14efb2fb.p7b

No malware configuration was found at this point.