Deep Malware Analysis of 5e1e402e90339348be7a2a68b60f55e5 | md5: 5e1e402e90339348be7a2a68b60f55e5 | Vidar Stealer | Go Loader (Factory-v3) | T1027 | T1055 | Executable | PE (Portable Executable) | PE File Layout | Win 64 Exe | x64

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	5e1e402e90339348be7a2a68b60f55e5
Sha1	97d0345c41cd94e6c005ed7b03217bfcb351b5fe
Sha256	5a24a5a7e387ec5de6d8fc95e5bf455efae511d0f981605b0b232c6f6260f5cb
Sha384	ed9c408a111fac978cd6d981095f48fad81678f31b63852a695d8f83d61800ed0992f8a541894015f7cbcf58f6b90c74
Sha512	339a85c61188f45f18b3321a5b467f2396f1523fc30392b3faf135491a1a2fc2b4b0916cb8b1e1eceb7fa1b09fdf6a9aadfd6e2863ea45bd4d099575ae11b40e
SSDeep	49152:uFKpz7i7FAlc03DCBGcm+a1h6TczyJPj4RRHrYvAaaG:uc3XND1aJrCOkG
TLSH	BA366A03EEA548F9D296D73588774242B764BC499B3533D32E60BA742F363D0AE79B40

PeID

HQR data fileMicrosoft Visual C++ v6.0 DLLPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:exe~T1027~T1055

Shape pe:exe

malicious 1 nodes

Name	Value
Info	PE Detect: PeReader OK (file layout)