Deep Malware Analysis of 844c944b41295ceff7b3135be45748eb | md5: 844c944b41295ceff7b3135be45748eb | Vidar Stealer | Go Loader (Factory-v3) | T1027 | T1055 | Executable | PE (Portable Executable) | PE File Layout | Win 64 Exe | x64

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	844c944b41295ceff7b3135be45748eb
Sha1	155213b02db69d1aa27d7fbb4a5950294b0a595a
Sha256	cf7503ed829480a052a2b1e1110bf989b0833d70176d77b31ee7773e0c15d7c5
Sha384	4d28cd330f0a1df5f9406db5351ef8404feb778e25cdccec68e8abbbd835c9c09cd56240bde836d91fbfd17c87989d3a
Sha512	fdb24edb91cd589ccbac0f21add28e74638d6fbd86a186404b68b423fcff4fd0b632f7e679c25ffebd5b38aa87bcd3e3fd6f688fb8ac4012b8c25619e93b803f
SSDeep	49152:boHVmHat/2n9oeLgDkF+9tRoH0NM18wlX2NhAbcsqZTUaP6jc:bGf489+18wlX2/ocsqZP
TLSH	5D267B07BEA108F9C1AAE33589AB4212BB74BC4D4B3233D32E50AA782F727D15D75754

PeID

HQR data fileMicrosoft Visual C++ v6.0 DLLPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:exe~T1027~T1055

Shape pe:exe

malicious 1 nodes

Name	Value
Info	PE Detect: PeReader OK (file layout)