Deep Malware Analysis of 688f1da6d2f99526613580892c5eaf8b | md5: 688f1da6d2f99526613580892c5eaf8b | Vidar Stealer | Go Loader (Factory-v3) | T1027 | T1055 | Executable | PE (Portable Executable) | PE File Layout | Win 64 Exe | x64

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	688f1da6d2f99526613580892c5eaf8b
Sha1	d9433d19da8b839d6f992b4c56894c842837818e
Sha256	400a51e2406f4e1d3c9357c026ddf6d81fff5e6e8652b2d7fdd29df286ee87a6
Sha384	1ab93ff57385d1b09041cf51b8c291db3773914edce0fe806d8fef87eebdeb22e6765b119673c159196095d5f68840c1
Sha512	161c16ca0d2362e9b867e91377da9d123da6a37f353fd0c9b9a970befe45a26271fa8283c2e448d362fbfe4824131b2a5e405864443e1a8fb79a7f9b54f20740
SSDeep	49152:SXRztnMOp17mFVjM0cHAcYoF5n62bk/bq4on/wUKdev:SbfuV3cf5nKkTKE
TLSH	94068D47BEA148BAC499A3318DB782427B3CBC051B3677D73DA0767A2E77AC06935314

PeID

HQR data fileMicrosoft Visual C++ v6.0 DLL

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:dll~T1027~T1055>bin

Shape pe:dll>bin

malicious 2 nodes

Name	Value
Info	PE Detect: PeReader OK (file layout)
Info	Authenticode present at 0x3CE7D0 size 2432 bytes