Deep Malware Analysis of 5e7afbc2588e40d0b30a8f45577ed6ad | md5: 5e7afbc2588e40d0b30a8f45577ed6ad | Executable | PE (Portable Executable) | Vidar Stealer | Go Loader (Factory-v3) | T1027 | T1055 | PE File Layout | Win 64 Exe | x64

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	5e7afbc2588e40d0b30a8f45577ed6ad
Sha1	e6fedf604883b4f166d60e329dd07abb994d8bbf
Sha256	88a9d97e1a5c132b1018c8a7f92f0c146cd86b8d85b438c220c760a9f2dc3706
Sha384	c69db0456f30b57f5754b03533ecff0223b88f3f31aad4da06ab9c3445809ecf501b66fa6b1e530c76367590477467f4
Sha512	b4f1bbe54dad2be4b646a0983c2c20c66a18e75daf2ce968d2e25abda9c102569d31314f723af83bdc8b37c041608c6a7b212349959e499bb809c42eff83813f
SSDeep	49152:f5SExxGrhzt5HXIxtSMaoyP4E9C3wSh+2lRLJH1QCD+iX6KUqj9gx5fBlVgwu9wX:fvukxtcl45hrfCUjkQqEO
TLSH	33568E077B8281B0D455EA7A84B7429477B03C5C833533AB2EA9E9303F663D1B67AF54

PeID

HQR data fileMicrosoft Visual C++ v6.0 DLLPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:exe~T1027~T1055>bin

Shape pe:exe>bin

malicious 2 nodes

Name	Value
Info	PE Detect: PeReader OK (file layout)
Info	Authenticode present at 0x5B4600 size 8080 bytes