Deep Malware Analysis of aac85efd2d298dcb919ee4d30224415d | md5: aac85efd2d298dcb919ee4d30224415d | Executable | PE (Portable Executable) | Vidar Stealer | Go Loader (Factory-v3) | T1027 | T1055 | PE File Layout | Win 32 Exe | x86

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	aac85efd2d298dcb919ee4d30224415d
Sha1	d232d6b8648c4ab024d5fd1897715cf63a63e886
Sha256	795e30e56ce1e68d271e9e258ea32686cbac763b264b036c48ca7d4fcce80dfd
Sha384	332a0e3bf616fe44d46c069de461ba67fc9269ec3a54fda18ccdcf6940907f02235c8c227950370871dd8425acffd832
Sha512	590b07a3a7391eced3ea5ea50214829f0363d61acd6c959a4ae0dd42dbaf5fa131e1be7e3eaaac681af95f18776a611fb0ef22a4af68b743bf3363e06336dcae
SSDeep	49152:8RpK6fWxZHGQAulw19JRgfFC3b7HJFlwNwrH6PfLsdRyzVeAXH1SX8wRanDyBZO/:aKkWvw1rGtCfHur4EbRyvo4yrEpO/
TLSH	47C65C11FACB54F6F9036831416BB27F23315D048B28DB9BEB583B6AF877691187A305

PeID

HQR data fileMicrosoft Visual C++ v6.0 DLLPeStubOEP v1.xPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:exe~T1027~T1055

Shape pe:exe

malicious 1 nodes

Name	Value
Info	PE Detect: PeReader OK (file layout)