Deep Malware Analysis of 6703fe8d507a7b9bf0c3d517349ab49f | md5: 6703fe8d507a7b9bf0c3d517349ab49f | Vidar Stealer | Go Loader (Factory-v3) | T1027 | T1055 | Executable | PE (Portable Executable) | PE File Layout | Win 32 Exe | x86

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	6703fe8d507a7b9bf0c3d517349ab49f
Sha1	56201e094c4a52dcb6af2364dafceccb79a6b2dd
Sha256	417ba8fd1d9879c1a85307bac243a9a5a6f548ebd370a0ff0dfd5bfa7c48a77a
Sha384	340311d086dc60b20f2cd89716e444070746eaecd68c51c3480dc7b5f3c103c083de807fc980de31938794650ec7f3f0
Sha512	06c2bce0a5dc2803a21d40e26450e827009709fbfa86fcd2dfa3fa5f3206c531f5114166963785459efc351c7ede77a7485c7d0000c8260fad93b19314e71295
SSDeep	49152:4XxLFxcRUsGTfTS5L4j2mWSqm/W1sDBKBkQfImdU3c7RAb1vLvktHN63aujnun9J:cFSRUs6j2h8/uYKAb1o6AE4qrNnEo/a
TLSH	B3C65B01FA8B65F6E9035831415BB27F23315D048B28DBDBEB583F2AFC776A1183A645

PeID

HQR data fileMicrosoft Visual C++ v6.0 DLLPeStubOEP v1.xPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:exe~T1027~T1055

Shape pe:exe

malicious 1 nodes

Name	Value
Info	PE Detect: PeReader OK (file layout)