Malicious
PE Executable
MD5: a44a3140952665cd76fd63fbdb9237fa
Size: 5.92 MB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Size
5.92 MB · 5,916,544 B
First seen
2026-08-11 21:31 · 2 months ago
Last seen
2026-08-11 21:31 · 2 months ago
Last analysis
2026-09-03 21:22 · one month ago
Hashes
MD5
a44a3140952665cd76fd63fbdb9237fa
Sha1
794bf555b1af39ab338b514e2684a09e2162699d
Sha256
d330bd6c589541980f2c337d33db76a84dd8fa4bbbda374e327ad13afc322b41
Sha384
e66e5ef52024aa8b64f1df38f393f0d815e9c16eabfc2acab2485117f402f64f174fbc8d414eba8e6396c05217f8e7bf
Sha512
eb98577c6130a3bd7c85733edddd308c911317edc604b04c31ccfaca5b8711e92c66ef3ce8c413e4886ce16f78883e55118589a4e31684f965efc49e578ca8d5
SSDeep
49152:CiALQowmY+Na0cygLYrF8A4BCv+5aCUDLcfbDzGSAmIFPVxsXfiak8BfVvka8HIG:CbSCfv2gHIzNjdwAsY7Sj
TLSH
19566B13A99195B9C0A0F73285BA4352B629BC4DD73137931F31AEB96F32BD29D36700
Detection
PeID
HQR data fileMicrosoft Visual C++ v6.0 DLLPrivate EXE Protector V2.30-V2.3X -> SetiSoft Team
1 malicious · 2 files
EXEa44a3140952665cd76fd63fbdb9237faT1027 · T1055Vidar Stealer
Structure
P7B[Authenticode]_e7f8db55.p7b
BIN(folder)
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:dll~T1027~T1055>bin
Shape
pe:dll>bin
malicious
2 nodes
| Name | Value |
|---|---|
| Info | Authenticode present at 0x5A3E28 size 2392 bytes |