Deep Malware Analysis of ad53c46cb197015beca178721863fd8e | md5: ad53c46cb197015beca178721863fd8e | Vidar Stealer | Go Loader (Factory-v3) | T1027 | T1055 | Executable | PE (Portable Executable) | PE File Layout | Win 64 Exe | x64

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	ad53c46cb197015beca178721863fd8e
Sha1	8233eefc8c5655a7bed32a1ecfb2e37c94529731
Sha256	8398bb1657184bf9b9cb3da1ec43eb4db939066317920514c659e59c3af7fda1
Sha384	a939ed05b9905aace084771f3303a08e7a850bd6f042d8fd969bceb7a46199f7fc5e5b173c65d868d424aa1656d3b3e1
Sha512	cfd3b721ea7f8de3066aa764d7bdc7ec4c49cfef7e47b78076b6663c15e322101a2ec7562f1aeacf96d429d3647c51f28a00aacb5edcdc2d42bb71464bbba6f0
SSDeep	49152:NQwLC9g5DsgX2OptKpe3VtaVCpiAo01qKSUQP7wC0PgM5Kvzx/FVAI/cGYqn1msc:NN54BMFzLmDhMvHqYlgR1tq7
TLSH	EB965A03BA5442B4D495DE39C47B8242BB747C8C8B32B7E76E14BA386F757C0697AB04

PeID

HQR data fileMicrosoft Visual C++ v6.0 DLLPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:exe~T1027~T1055>bin

Shape pe:exe>bin

malicious 2 nodes

Name	Value
Info	PE Detect: PeReader OK (file layout)
Info	Authenticode present at 0x900000 size 8088 bytes