Malicious
PE Executable
MD5: a5fc847c747a3054529e361a4158d3ea
Size: 7.05 MB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Size
7.05 MB · 7,045,120 B
First seen
2026-09-09 18:30 · one month ago
Last seen
2026-09-09 18:30 · one month ago
Last analysis
2026-09-09 18:30 · one month ago
Hashes
MD5
a5fc847c747a3054529e361a4158d3ea
Sha1
f41e24ea6b5387aa848d0ecadd5c8e735b54804b
Sha256
74def0e4ad75c75aab47de583d29deaabdf7e02491e78945afeed9a4788b599a
Sha384
910d4fe0cf4f2a3e405756ed8bd9e814ade0ffcc79b35799cf585061d4673323f3f99cdd4d7f6d95a5172c5bdc820a49
Sha512
f86b30025eebcfd82755c82fea08de2ba339bd497da5f501723f98d482bbe85a8160f28665d75a47aeee22131a3c81ae1203ce2df390e91639a3a07e7ccf2394
SSDeep
49152:p//H9suDh0Eb+kq6I6l2yy0i6XaYNbHkkCOnFVFt+SR0oljEz5uiHUWUDmq:pTwt0NblF/trR0oljEzQiHv8
TLSH
B4666A07BDA105A9C09A9730C8A742567B357C8D8F3137E72E94B7382F7A7D0A97A704
Detection
PeID
HQR data fileMicrosoft Visual C++ v6.0 DLLPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamUPolyX 0.3 -> delikontElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!
1 malicious · 2 files
EXEa5fc847c747a3054529e361a4158d3eaT1027 · T1055Vidar Stealer
Structure
P7B[Authenticode]_a87543c5.p7b
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:exe~T1027~T1055>bin
Shape
pe:exe>bin
malicious
2 nodes
| Name | Value |
|---|---|
| Info | Authenticode present at 0x669600 size 8120 bytes |