Deep Malware Analysis of 88be5f9a0dc8d25bb1fc9827f728372c | md5: 88be5f9a0dc8d25bb1fc9827f728372c | Vidar Stealer | Go Loader (Factory-v3) | T1027 | T1055 | Executable | PE (Portable Executable) | PE File Layout | Win 64 Exe | x64

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	88be5f9a0dc8d25bb1fc9827f728372c
Sha1	9a40f4fbe5e570189f7efdd9f88bfdd17f14b494
Sha256	02c9a3ae7a7b6e77444717840c29e403a27ec5e96afecfe6efbf51f0129773ac
Sha384	8dc9586df977cbc4cf9c66261666c5b4f0d681c507a53e870ff866b473b920b950c6bdb98a0b0b7773faaf8664ea8633
Sha512	624a38307026d00fe5035db6e3ea8f0a63a84a8606a0597b62e506027a09f0daaacd68662448763603f47645d93f2f79f9b91d23af168f83eaa791e08c8fc69b
SSDeep	49152:g9pMpgKMhkaHLbYdCyYaSuvahQlZJ+g2pDApe1XqifJEq:gDaDDo999f3
TLSH	64D58C1B7CD149EAD06663728DB36286BBB5B8090F7223C72E90B7782F726D45C74B14

PeID

HQR data fileMicrosoft Visual C++ v6.0 DLLtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:exe~T1027~T1055

Shape pe:exe

malicious 1 nodes

Name	Value
Info	PE Detect: PeReader OK (file layout)