Deep Malware Analysis of a68593bdc4c71976fb5f6ef18cdbc7d1 | md5: a68593bdc4c71976fb5f6ef18cdbc7d1 | Executable | PE (Portable Executable) | Vidar Stealer | Go Loader (Factory-v3) | T1027 | T1055 | PE File Layout | Win 32 Exe | x86

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	a68593bdc4c71976fb5f6ef18cdbc7d1
Sha1	1d6e6f5f53ed3a6fd1e22d26ca202c62d8899004
Sha256	cd1a31628c7872c86f7ec22d5729d2c47e8b3a0cdcfbcd2d719cb8e2728b56f9
Sha384	61004afd69a0ea3b7d0bf76d6d0912b25cb98860ad89990340e433bd236f906877a1589e5d929d16d346e1d47eae3df6
Sha512	84d499b77a94b40592a99ebcd3c62edb6855896dab2dc529e6a278189af1d8d4f61064e3fb75185154400f9b9ebaef0a4415464eca1e4ffbe2a4ed2bd541798e
SSDeep	49152:pp1ZiDuEcM2GPcSQ49JxW/PCuia0uFkYtlOYnosGdNaVBYojAxndvBVv+WhHjQu6:dZ4u8Q47A3Cq0oiuzKV/f4CaE4O/
TLSH	E6C65C11FACB54F6F9036831416BB27F23315D048B28DB9BEB583B6AF877691187A305

PeID

HQR data fileMicrosoft Visual C++ v6.0 DLLPeStubOEP v1.xPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:exe~T1027~T1055

Shape pe:exe

malicious 1 nodes

Name	Value
Info	PE Detect: PeReader OK (file layout)