Deep Malware Analysis of a0e99b168dc62db6b25d741e3df09f5e | md5: a0e99b168dc62db6b25d741e3df09f5e | Stealer | Vidar Stealer | Executable | PE (Portable Executable) | PE Memory-Mapped (Dump)

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	a0e99b168dc62db6b25d741e3df09f5e
Sha1	59f823f5816041e19d5a480ecf2311121de0e0ae
Sha256	caf06121aa982d9d7a75e22aae1e6aa4457cd702e0c5dbf5a7a90e5771a5be80
Sha384	13a2912d7ff50a8b6f7bc4c8d89fff961860372d9a09adb7f3047d661ce46f6fa461cf2f199d4987d5b3906b871b22ad
Sha512	b6ba7b110e02657911f342a8691688af22607d874e7342dfe05146f928f078aa0d1b022bd517c3538dc360015165b9fad684e79af31c5a73958e7fcc9873b656
SSDeep	1536:eNp89dFZj9Icn4Umi45Gbd+p70L5qQBBGr5ur0kZlang2KJbJ6QQ+IeFr:eNurpIchmV3p7aHgmIKJJA+IeFr
TLSH	9BC37D21B660C032D5E6253E99B98B725B7F78319B7840CB77D40B3A5EA03D1AF38356

PeID

MS Visual C++ v7.0 DLLMicrosoft Visual C++ 6.0 DLL (Debug)Microsoft Visual C++ v6.0 DLLVisual C++ 2003 DLL -> MicrosoftVisual C++ 2005 DLL -> Microsoft

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:dll

Shape pe:dll

1 nodes

Name	Value
Info	PE Detect: PeReader FAIL, AsmResolver Mapped OK

PE Layout UNKNWOWNsuspect

Memoryhuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential