Deep Malware Analysis of 91fdcaabfc774a9026bdc39bd3d2f69d | md5: 91fdcaabfc774a9026bdc39bd3d2f69d | Vidar | Go Loader (Factory-v3) | T1027 | T1055 | Executable | PE (Portable Executable) | PE File Layout | Win 64 Exe | x64

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	91fdcaabfc774a9026bdc39bd3d2f69d
Sha1	411959d76bd7b01504a95517f98bb76b06275cf4
Sha256	a0df2239d79f25e184bc5f6eefa7130bd01d8a5dc59b7ffbfb84c7b676c2a2e1
Sha384	e2acd52aa7bbb4142b4b7419424f2800af4b26c599325e0d595c32501b85819a2642ffeb325bd5e2345388366f0467a4
Sha512	b6031f0f0cfc6c50f50f82cb4410ebba64f1eb5149ede50c19980ea115e587e297472a8e887804c1757bf652e3b7345337ca9453b5b283e943088af430895779
SSDeep	98304:rvNBqOiYI72kEdNMyCuiozJ7d+ryklsdoEn:r1BSYI73EdN/BdJ+ryklkn
TLSH	46964947EC6549E8C1A9D23486329162BB71BC485B3123D72BA0F7782F77BD06EB9350

PeID

HQR data fileMicrosoft Visual C++ v6.0 DLLPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:exe~T1027~T1055

Shape pe:exe

malicious 1 nodes

Name	Value
Info	PE Detect: PeReader OK (file layout)