Deep Malware Analysis of 79c20f402ce52f710c981457d88acd57 | md5: 79c20f402ce52f710c981457d88acd57 | Vidar Stealer | Go Loader (Factory-v3) | T1027 | T1055 | Executable | PE (Portable Executable) | PE File Layout | Win 32 Exe | x86 | Html | Javascript in Html

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	79c20f402ce52f710c981457d88acd57
Sha1	82b94aec04a369a55d3197443d74b6169eca5de8
Sha256	c5b47b6fb38693695b05ccabc05abb68ca5a620590eaf068c93da0f7f03bd66a
Sha384	e419b1606dd86a87ac0c41530a76607f94c8408ac1315d50ae7d4f679d487ccdd92b1e1c1cbfcd0b8e698abe8deddcda
Sha512	7402830b09db414f746c24a4f5a2f722be622c47d7fe2159b426f864b7575ec796b0c0a6e073e42d405e7d7ea9ded87e7e7e4294e0696950e16dd6aaa1bbb67e
SSDeep	98304:FJrAtzR9s4rRTcLgCtsQ1Sz4bpNyEU91llQdE1en+F4rMyduNpTnHhWEf:cHshLgCtsQWi1U91l2dEG+F42nwEf
TLSH	B2A67C41FE8B94F5E903193041ABB22F67319C058F76DBDBEB503F6AE8B72914836245

PeID

HQR data fileMicrosoft Visual C++ v6.0 DLLPeStubOEP v1.xPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:exe~T1027~T1055

Shape pe:exe

malicious 1 nodes

Name	Value
Info	PE Detect: PeReader OK (file layout)