Deep Malware Analysis of 8d0fa8795f3b4e43459ebd14a8c15c1e | md5: 8d0fa8795f3b4e43459ebd14a8c15c1e | Executable | PE (Portable Executable) | PE File Layout | Win 64 Exe | x64 | Vidar Stealer | Go Loader (Factory-v3) | T1027 | T1055

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	8d0fa8795f3b4e43459ebd14a8c15c1e
Sha1	b67aa382fbff44677a279b84d613d9d2ed6f9811
Sha256	550b393f4daf05fc157782cb6e6ee783a7cbe88b958c29192afc554c5ce0ef64
Sha384	364aa7af12b958158bc2a6db6ad4dc361b5792c3c73afae3f31547c9cd7711324a7fa647884f7ebc8afbce0810d29182
Sha512	5173458677ede5241d2ed4c5b10d333acd0de1946e8b9ccb031c355f06036269af94e74b39f03e2a24529e0f33cf51c4a27036a5e1744c7d4458fe929e79fa08
SSDeep	49152:AQRQDEAs+c9yhakwV5jXO79FZIWo/ECtlmOVr8JHnfrttOy6h5+8mlzwirpcWmRk:Aq4iVrMnzt+jPWwir5c
TLSH	8D667C07B9A505E8C89AC634C47B93437A78B88D4B3573D71E10B6343FBA7D899BA704

PeID

HQR data fileMicrosoft Visual C++ v6.0 DLLPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:exe~T1027~T1055>bin

Shape pe:exe>bin

malicious 2 nodes

Name	Value
Info	PE Detect: PeReader OK (file layout)
Info	Authenticode present at 0x662400 size 8104 bytes