Deep Malware Analysis of a13bcc56c8037a92e6ed2fd78c5f2417 | md5: a13bcc56c8037a92e6ed2fd78c5f2417 | Executable | PE (Portable Executable) | Vidar Stealer | Go Loader (Factory-v3) | T1027 | T1055 | PE File Layout | Win 32 Exe | x86

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	a13bcc56c8037a92e6ed2fd78c5f2417
Sha1	a0aefaab9ba95230ad6fcdff26f46b1329d01637
Sha256	617739f264479ff970bd61c77cade4750fa49ecb82f1104c91c5a6bce197426b
Sha384	7dc9ea14c1bf176fb32a83abcfff998af5e1b19ef88f2f4b8b8d1653598c531436dbd216e0e1ebc202385a2bb2254aab
Sha512	8a7848be60b9a43cbabed5bbe1b1de3f96f85e85e836147491a9aa3219f6027a33c24fab187a0dfc0f4f5bb825cb0d985c721bba5e10f6d24ad57774b54d8a02
SSDeep	196608:J/SB8eAsgSQZ1yaAa/rRacUK8neSrbnQ5Z5sTjVYt:BL1yusc58neUgsdYt
TLSH	21E6BE41FE8B54F6E907493114ABB26F2330AD058F29CBD7FB407A6AF9376925837205

PeID

HQR data fileMicrosoft Visual C++ v6.0 DLLPeStubOEP v1.xPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamUPolyX 0.3 -> delikontElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:exe~T1027~T1055

Shape pe:exe

malicious 1 nodes

Name	Value
Info	PE Detect: PeReader OK (file layout)