Malicious
PE Executable
MD5: 956d988cdf677ac672ce457430e7625c
Size: 9.04 MB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Portable Executable file
Size
9.04 MB · 9,036,288 B
First seen
2026-09-04 11:15 · one month ago
Last seen
2026-09-04 11:15 · one month ago
Last analysis
2026-09-04 11:15 · one month ago
Hashes
MD5
956d988cdf677ac672ce457430e7625c
Sha1
f17dc600b0fa1df09852cd063ea230b5ebbbda7e
Sha256
a61a51ddcd88162bec985efffaf7577c2b1a663ac3969b4d009b256d8ea733a5
Sha384
77d3b08e3d6977c628049e342f0099c5fdf96fcf055144fcc8beed691c78abf2f0bd71519287bbf51f286e504b726641
Sha512
231b5fe581a4c61977360366067b6eecf3d6278ec7bdcb9ff946551b4f0a766397091f0fb271dbcdba8932c36ad06656fbde46e69a68cb3e5d1cbfc3d1441066
SSDeep
49152:yZSl4qa9WP9TI3eTsIcu6nbQ3OBRAqRr1sJwCoTx3P6Jiq5GlWxbg6:yEa3AzzqDsOtTx3Ciq5GlW
TLSH
EA967C077A9549F9C0A9E735C8BB5221B670BC0D8B3133E32E506AB82F723D19D79B54
Detection
PeID
HQR data fileMicrosoft Visual C++ v6.0 DLLPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!
1 malicious · 2 files
EXE956d988cdf677ac672ce457430e7625cT1027 · T1055Vidar Stealer
Structure
BINOverlay_ef5ff3c0.bin
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:exe~T1027~T1055>bin
Shape
pe:exe>bin
malicious
2 nodes
| Name | Value |
|---|---|
| Info | Overlay extracted: Overlay_ef5ff3c0.bin (4520448 bytes) |