Deep Malware Analysis of 904a05944cd99a065bcfdc036369d823 | md5: 904a05944cd99a065bcfdc036369d823 | Vidar Stealer | Go Loader (Factory-v3) | T1027 | T1055 | Executable | PE (Portable Executable) | PE File Layout | Win 32 Exe | x86

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	904a05944cd99a065bcfdc036369d823
Sha1	1fe52551dbe4791a6bcd2c4350e2b2a4e86d2043
Sha256	b083df8c6bc1f8129547a16b1d0636d81761ab9829fe523add12486196c9c4bd
Sha384	932babad007fcab641314b44d3e54022c22a1b453fd197d9d8c534b229fb9e9837644a8bfcdb06075ac2b141a8170f3e
Sha512	636580f5c547b16c4f45347ee1f5c486e4109f6186b76c989b0a9026293338b66b7a7311ed9a0e1964cfc4dff7bf6913bf407dac1cb6c10a25b418f1f4ad9816
SSDeep	196608:JarJ2jFSJSZ4IeN6k/0zKU/2r9XHSGx937NOsZ0:6qQJtIk6yWK95XHx93hpZ0
TLSH	EEB6BD41FE8B59F9EA0759314597A26F63306C058B24CBD7EB547B2AFC37AD14C3220A

PeID

HQR data fileMicrosoft Visual C++ v6.0 DLLPeStubOEP v1.xPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:exe~T1027~T1055

Shape pe:exe

malicious 1 nodes

Name	Value
Info	PE Detect: PeReader OK (file layout)