Deep Malware Analysis of 6b333dfd5e6059d9ff5da4cacfd706e3 | md5: 6b333dfd5e6059d9ff5da4cacfd706e3 | Executable | PE (Portable Executable) | Vidar Stealer | Go Loader (Factory-v3) | T1027 | T1055 | PE File Layout | Win 64 Exe | x64

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	6b333dfd5e6059d9ff5da4cacfd706e3
Sha1	4f074bd3b608b4cace00a61a75d5efe29f4765cb
Sha256	1ab6782e44c69df2ce8a5e9e5f784a7e3a50fb157d185bf4dabfba0ab2ad70c4
Sha384	269c7be4bc62d2b0eae735b415ce68492447d5d9f5317b7d5b367a50fcd09f4fbb1e275825debe986b9c5ef761448921
Sha512	5b5d80b56f49042bff23a3e796b0f77070804239f72087e96f72c093cf10c915544b7548c018c59e9572e666e4a6989e8f524333388add46201e7fd3d3216678
SSDeep	49152:HbDipQKKujyFa0mrw8LT1ZVbrYwGPXfe53axVghIg9MKaK9KXfSV5EpE:HaZ7jRruPPkN7EO
TLSH	74265B17ECA549E9C0AAE23189639152BB71BC482F3123D32FA0B7382F767D06E75754

PeID

HQR data fileMicrosoft Visual C++ v6.0 DLLPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:exe~T1027~T1055

Shape pe:exe

malicious 1 nodes

Name	Value
Info	PE Detect: PeReader OK (file layout)