Malicious
Malicious

82ed4610ba120836185550f6879f5dee

Share on LinkedIn
Print
PE Executable
MD5: 82ed4610ba120836185550f6879f5dee
Size: 12.97 MB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan

This sample is a 12.4 MB PE Executable identified by Malva.RE as Stealer Crypter (stealer loader). It matches 1 YARA rule. Observed behaviours map to MITRE ATT&CK T1027, T1027.001, T1055 and T1140. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
b1022d3e58a0318b52feb8aa8048376113ca7596830cb0da750c08f2c8ece583
MD5
82ed4610ba120836185550f6879f5dee
Verdict
Malicious
File type
PE Executable · 12.4 MB
Family
Stealer Crypter
Category
Stealer Loader
MITRE ATT&CK
T1027T1027.001T1055T1140

Cite this report: https://app.malva.re/sha256/b1022d3e58a0318b52feb8aa8048376113ca7596830cb0da750c08f2c8ece583

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
Portable Executable file
Size
12.97 MB · 12,966,912 B
First seen
2026-11-02 07:30 · an hour ago
Last seen
2026-11-02 07:30 · an hour ago
Last analysis
2026-11-02 07:30 · an hour ago
Hashes
MD5 82ed4610ba120836185550f6879f5dee Sha1 9560d522b604a82e18d55e1efe90b6028fa0de99 Sha256 b1022d3e58a0318b52feb8aa8048376113ca7596830cb0da750c08f2c8ece583 Sha384 da2dacddc0f84ef0977e1365f4f179cd28fd8ed4419ad721d16ddd356706814c3612b0a4c01c1e48350b7832e83a8904 Sha512 b78473fe2cc55c0cce43bdea14e712c0d2dfbb4e0e934985a67d063ee98cfa1b06d3fd3840f6408569b7520d9929b45fedd78103e60e361baa857c80ee8c58cf SSDeep 98304:5fPSk1zQdgcRcZ1b6HJOEUUNNpsNAAjbQ:5HydLWbK1pQ0 TLSH EBD61883F851A2D8C4AB93754D2152E1FA303C492B7973E71760BBA92B327E09FB5750
Detection
PeID
Microsoft Visual C++ v6.0 DLLPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!

1 malicious · 1 file
EXE82ed4610ba120836185550f6879f5deeStealer Crypter
Structure
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path pe:exe~T1027~T1027.001~T1055~T1140
Shape pe:exe
malicious 1 nodes

Name Value
Attribution 
Crypter de stealer commodity (imphash multi-familles). Le stealer livre (RemusStealer, Vidar, Stealc, ACRStealer... selon le build) est dechiffre et mappe en memoire : non attribuable statiquement. file-inflation probable (entropie 6.14, taille 12663 Ko).

An error has occurred. This application may no longer respond until reloaded. Reload 🗙