Deep Malware Analysis of 5e0930ab485e03c55c8efefd91e3f8d5 | md5: 5e0930ab485e03c55c8efefd91e3f8d5 | Executable | PE (Portable Executable) | Vidar Stealer | Go Loader (Factory-v3) | T1027 | T1055 | PE File Layout | Win 32 Exe | x86

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	5e0930ab485e03c55c8efefd91e3f8d5
Sha1	7fcaacf4ca70eca01b78d48ed4b4328784eb6bcb
Sha256	b7ce0eca85c6f905ee8e7332f9a1b93c5ef768a4cf6d18f6f4156c18083a3ff6
Sha384	b212e319afd012049c8066c40b7ce58186b69f7af914b9eaf5e393747ebbbc484b754f121c5ca509a3eda43062b08b85
Sha512	a44fdeba1e17dd3157ea7042d42b2682b06d410fedab653a08769358d4aafd303df0ad54ad0ab4dddd47209380f2a954544d38b5346fa5b5042cab3c9304d701
SSDeep	98304:PfaU09C734CwYSPejMA9l7c4tG20CzEWF:3022Yy7A9dcHtk
TLSH	38C65B11FADB95F2E9035831016BB37F23315D048B28CB9BEB547B2AF87B6A11D66305

PeID

HQR data fileMicrosoft Visual C++ v6.0 DLLPeStubOEP v1.xPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:exe~T1027~T1055

Shape pe:exe

malicious 1 nodes

Name	Value
Info	PE Detect: PeReader OK (file layout)