Deep Malware Analysis of 9ce7f6815c1f37978be788bd7b73ddbe | md5: 9ce7f6815c1f37978be788bd7b73ddbe | Executable | PE (Portable Executable) | PE File Layout | Win 64 Exe | x64 | Vidar Stealer | Go Loader (Factory-v3) | T1027 | T1055

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	9ce7f6815c1f37978be788bd7b73ddbe
Sha1	94626b4c5851a14a5a823494eb29eccb1bb2eb83
Sha256	3b1bb011cab1488869aa1db821881110750262a96f37ae22c61f8ef973fa343c
Sha384	b9a5e716b7247072623bbad39791f8fe8d47806fa22cc2dee85ee007bf6fb3a25b2623cae50f16b921f44efe2b6c2039
Sha512	f046313fa1a5c412c3ae8fe82d3c2b34e6d10f0941f38c1fe11a6eb33858c4a5f1a16ed21aaf8e493a3040dc12e24bea58a8548190b09f75a276092eb4afd930
SSDeep	393216:maLJvvtSRl8U2lPklvIRU/wdl1gQvVxvBGULAbFwdP7Idauwzts2Alk59bj45sLL:vue5+lc
TLSH	11D62A83AA4A04E6C5819B39C0775E31BAADB84ED73037B71E50D6742F223D0A97974F

PeID

HQR data fileMicrosoft Visual C++ v6.0 DLLPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:exe~T1027~T1055>bin

Shape pe:exe>bin

malicious 2 nodes

Name	Value
Info	PE Detect: PeReader OK (file layout)
Info	Authenticode present at 0xCA7C00 size 8088 bytes