Deep Malware Analysis of 9a161422c933602162575732787e6a1e | md5: 9a161422c933602162575732787e6a1e | Vidar | Go Loader (Factory-v3) | T1027 | T1055 | Executable | PE (Portable Executable) | PE File Layout | Win 64 Exe | x64

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	9a161422c933602162575732787e6a1e
Sha1	7b35170205aad6938b1caf4d1aeba4376de308aa
Sha256	2af024203c58f63a805fecfd68e1d05cddde45e2de6f7ec94c45afca7af22d26
Sha384	2226910cac39abe9c968711adae1ba11bc16f43333167541036f5a33ac56e0be439536759b9bf84f46bd99c9e87c657b
Sha512	ad56ea32c1c831239e484842a0a1e9a4a486fa6024ab8126626bac2050f427ae450aba2c2cafffa60a3e851b785b18db86069257b095ddb8e35153486f8c62c5
SSDeep	49152:jmHtGEkVbSdTnU6ztuUu8XIxR+q4FbheS4Evf71Uytb45s0Tme4iBKw5xqDnap:j89nUYLiMhLf71U8cs0q47qD6
TLSH	CD467C477E9169A9D8269738E17B03617BA0BC8CCB3173A32D50B2702F257C16EF6B15

PeID

HQR data fileMicrosoft Visual C++ v6.0 DLLPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:exe~T1027~T1055>bin

Shape pe:exe>bin

malicious 2 nodes

Name	Value
Info	PE Detect: PeReader OK (file layout)
Info	Authenticode present at 0x581600 size 8104 bytes