Malicious
PE Executable
MD5: 635e071cb98e56f6c06c947a556773a9
Size: 1.61 MB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Portable Executable file
Size
1.61 MB · 1,610,752 B
First seen
2026-09-01 12:15 · one month ago
Last seen
2026-09-01 12:15 · one month ago
Last analysis
2026-09-03 21:08 · one month ago
Hashes
MD5
635e071cb98e56f6c06c947a556773a9
Sha1
21b0ec96ee2d703ca18f03d995328af42846f923
Sha256
18550b4058e42bce55ab7b285402be28f6b964735aef0bf46052d368f99b02af
Sha384
c55ea33746d6a4cdb7bac1a6ce197e5fa644703615b368c9ceb7ff8332f861f9d7ed2c0dbe120f03846b6b7dff2912cc
Sha512
f0dce17ea27252614cb3c10c9f38fbf2232d7c524bb418a11c90db01cfceb73c9503ebd33cb837ee8bc60fc4becc3505e3155fc1991ec8381e7f4bbd91802bca
SSDeep
24576:cCI3nTmu5SrIbm7doCkZpm1JRinPWOaHLjGnmwLy:cZ36u5S0gk/mc6O
TLSH
9075395B7CD118B6C0AA9232896251A27B62BC440F3233DB2E61B37C2FB3BD15D75794
Detection
PeID
HQR data fileMicrosoft Visual C++ v6.0 DLLPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!
1 malicious · 1 file
EXE635e071cb98e56f6c06c947a556773a9T1027 · T1055Vidar Stealer
Structure
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:exe~T1027~T1055
Shape
pe:exe
malicious
1 nodes