Malicious
PE Executable
MD5: 780dbe517092960a53b0100d9bd0e4fb
Size: 5 MB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan
This sample is a 4.8 MB PE Executable identified by Malva.RE as Vidar Stealer. It matches 1 YARA rule. Observed behaviours map to MITRE ATT&CK T1027 and T1055. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 9ce069225f5c6b86199aa6f4ac3311c7bb28465ed92ed387d8f2014e260962f5
- MD5
- 780dbe517092960a53b0100d9bd0e4fb
- Verdict
- Malicious
- File type
- PE Executable · 4.8 MB
- Family
- Vidar Stealer
Cite this report: https://app.malva.re/sha256/9ce069225f5c6b86199aa6f4ac3311c7bb28465ed92ed387d8f2014e260962f5
Related Vidar Stealer samples
- 6d68d0a96c8bc726cbe3bf6f6253fb0ccae50627e966b8606f3582ef65eacec7 2026-11-01
- 925a9d35a32e1a6a1ce1ae4b9ff09e289184d4d925d700752c99f15ab04296dd 2026-11-01
- c96f81d0ddbc29f0315c4b0809d97e280051a016b6a6852e5bd88e1a6ec235bc 2026-10-29
- f0f686989d043a10a7f5ee442fc97877ac52b9baf16b4cdca1191dd9631efc4c 2026-10-29
- d515d3eeb16636e316345494bf98a312b59bb7f5c226faa6c64ca2e6980f3185 2026-10-28
- 9758f758b221d0ab47e831ce9ec8dee2e8d9fbb58d3c91b0ce056fa1f6fa0cfd 2026-10-28
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Portable Executable file
Size
5 MB · 5,003,567 B
First seen
2026-09-11 14:15 · one month ago
Last seen
2026-09-11 14:15 · one month ago
Last analysis
2026-09-11 14:15 · one month ago
Hashes
MD5
780dbe517092960a53b0100d9bd0e4fb
Sha1
2d129761daa96d5cfc6ccff6e3c58f90ac9187d3
Sha256
9ce069225f5c6b86199aa6f4ac3311c7bb28465ed92ed387d8f2014e260962f5
Sha384
a0c097137d4c02a64af6031a59a13ffb9cddb1a697c0150b8fd5cfd1041721d9bd15409cb432b72c63884cd9d49b68d1
Sha512
5b7623c4b1a719f4dc83b274fc6f271b604ac7533894eacef1c86565edc74903ee8850f7fd1ffcfe5fc9cb6816748a9348f9731fed1264ae14d222ad14bdc432
SSDeep
49152:uFKpz7i7FAlc03DCBGcm+a1h6TczyJPj4RRHrYvAaaB:uc3XND1aJrCOkB
TLSH
58366B03EEA548F9D296D73588774242B764BC499B3533D32E60BA742F363D0AE79B40
Detection
PeID
HQR data fileMicrosoft Visual C++ v6.0 DLLPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!
1 malicious · 1 file
EXE780dbe517092960a53b0100d9bd0e4fbT1027 · T1055Vidar Stealer
Structure
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:exe~T1027~T1055
Shape
pe:exe
malicious
1 nodes