Deep Malware Analysis of ac646bb0d39996bc79eaa5bfb2dc974f | md5: ac646bb0d39996bc79eaa5bfb2dc974f | Vidar Stealer | Go Loader (Factory-v3) | T1027 | T1055 | Executable | PE (Portable Executable) | PE File Layout | Win 64 Exe | x64

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	ac646bb0d39996bc79eaa5bfb2dc974f
Sha1	13c3f91e0431742f8124898fdce1d6629a268efb
Sha256	09327330965d2ade35113670ae1d97a48bfe46c2519ccf108a0a64f205791914
Sha384	6880c0897a0d108a6d4c7ab30b5d43d48084baadf925da0e2aa13c2f445bf5f615b08610bbfc90eb104d85837ce8735b
Sha512	e1c5db2ca6f95ae913c3968e7d70634b2ba934eae70d04716ef3168125b94509fcab2b21d4c55a257de8e6d86989f509e7325d697091f3f8627459f16df96049
SSDeep	49152:SbkGHN0c8Lhldouv2yoN9RygGHBq4ryq9R6OO/herJw1Dr:SbNiuv9RygeBGcR7O/AFyDr
TLSH	FC169C47ECD108AAC0A6A3718DB712857B7DB8151B3227D72EA0B37A2FB67D05C36714

PeID

HQR data fileMicrosoft Visual C++ v6.0 DLLPrivate EXE Protector V2.30-V2.3X -> SetiSoft Team

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:dll~T1027~T1055>bin

Shape pe:dll>bin

malicious 2 nodes

Name	Value
Info	PE Detect: PeReader OK (file layout)
Info	Authenticode present at 0x3DF950 size 2416 bytes