Malicious
PE Executable
MD5: 9a26ba6d4c0baa29512b0f32236b6f0e
Size: 5.36 MB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Size
5.36 MB · 5,358,592 B
First seen
2026-08-11 19:32 · 2 months ago
Last seen
2026-08-11 19:32 · 2 months ago
Last analysis
2026-09-03 21:22 · one month ago
Hashes
MD5
9a26ba6d4c0baa29512b0f32236b6f0e
Sha1
00f193a8ddb9f184838c5955692bf272df70189f
Sha256
799c075cbf035d8c61af0d0c5297f73e6ab0a8e9cd39253e27e827255c03b6fe
Sha384
996578d53e50643838077ba0f1e67d94765d5cb17aca4b7b1d1a3aab9d8d0a29799af3470ba26a54ba5319a6719f68cd
Sha512
c415b1a0706f0982b8143162e26d38370f29ce74f6ee0cc4855dd8fd0fa0b0841ec0cb2063624be23c051522d3dd406548b980553f5b030cde89abfbdf3b6a83
SSDeep
49152:gVVP30aEPJFl3mJxjNalbEw09DUTGs38iAZ2rC2cFRgT6Qobl35six8LdwXB1NI8:gbvgnWvwQbl3CyJmxC
TLSH
D6466B02BEA24E78C0D6E731897B4241A674B84C873537E32E65AEB53F763E15E75B00
Detection
PeID
HQR data fileMicrosoft Visual C++ v6.0 DLLPrivate EXE Protector V2.30-V2.3X -> SetiSoft Team
1 malicious · 2 files
EXE9a26ba6d4c0baa29512b0f32236b6f0eT1027 · T1055Vidar Stealer
Structure
P7B[Authenticode]_9de02482.p7b
BIN(folder)
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:dll~T1027~T1055>bin
Shape
pe:dll>bin
malicious
2 nodes
| Name | Value |
|---|---|
| Info | Authenticode present at 0x51BAA0 size 2400 bytes |