Deep Malware Analysis of 64b041f77a3fa5eaed742c0df1735d87 | md5: 64b041f77a3fa5eaed742c0df1735d87 | Vidar Stealer | Go Loader (Factory-v3) | T1027 | T1055 | Executable | PE (Portable Executable) | PE File Layout | Win 32 Exe | x86

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	64b041f77a3fa5eaed742c0df1735d87
Sha1	7ddb87be744c3b47ef7bf16314c0aa46e5098d6e
Sha256	2c7207e9e8bbc26356a79d78a02629bc7cdde6091ae07674eb54cb56495454f9
Sha384	5611ba6d2edce75b14089617019ecca83ca2b596416b6c6a03d63fbd5ddf20237597fb708a8766cc80f8c3a6ef9f9379
Sha512	7a66d43a827deeaff40036b66b1052e0a8011c7d3a7f15596c2fb718d9ea0dadbb11c4183800e5c12d4193302e13759afc3eb7dfc75f18be5413ba12f23726c3
SSDeep	98304:ZcZ4lq3rhXC3Rb3332oLxI4S3HVd7E4O/:1lCeRz3meITe4O/
TLSH	B7C65C11FACB54F6F9036831416BB27F23315D048B28DB9BEB583B6BF877691186A305

PeID

HQR data fileMicrosoft Visual C++ v6.0 DLLPeStubOEP v1.xPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:exe~T1027~T1055

Shape pe:exe

malicious 1 nodes

Name	Value
Info	PE Detect: PeReader OK (file layout)