Malicious
PE Executable
MD5: 6bc44d424cdc16e6d3c5988db50b27a5
Size: 3.52 MB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Size
3.52 MB · 3,517,272 B
First seen
2026-07-23 07:16 · 3 months ago
Last seen
2026-07-23 07:16 · 3 months ago
Last analysis
2026-09-03 21:11 · one month ago
Hashes
MD5
6bc44d424cdc16e6d3c5988db50b27a5
Sha1
b575a1b6a03362d5dc9f788c2b569040ebc4135e
Sha256
9c41611e704f413156caa104cc487b9f0a095768a4343898861de8d69d827abb
Sha384
8bad3e6214720576e8b9a5d4e741599438eafd7067ea06a6577eb07a97bd6fc0e7cb3ef868bcb5b1052fb6730425d1d1
Sha512
f149d34bea8038a7c1ae5326ad45e9169d971b66a2c011ecf8f13ba8b3c76ebaabf9f954b72261395fdca4cf97186ec3d8f52fd7a735fb7322167ee1a6adb051
SSDeep
49152:WS8zAS4bvxEyCzYKZLDVbIX195YoNaCIv8+pX1yhPdpURRWndj:WSOs9x195Yoq1ZRRY9
TLSH
90F58C13ACD159F2C0A9A231C972A5517776BC091F3637D72E91BE382EB2BD05C3AB14
Detection
PeID
HQR data fileMicrosoft Visual C++ v6.0 DLLPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamUPolyX 0.3 -> delikontElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!
1 malicious · 2 files
EXE6bc44d424cdc16e6d3c5988db50b27a5T1027 · T1055Vidar Stealer
Structure
P7B[Authenticode]_9e66d69f.p7b
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:exe~T1027~T1055>bin
Shape
pe:exe>bin
malicious
2 nodes
| Name | Value |
|---|---|
| Info | Authenticode present at 0x35A200 size 2392 bytes |