Deep Malware Analysis of adb0a3db727b4d5ec87ed6d4af4e16fa | md5: adb0a3db727b4d5ec87ed6d4af4e16fa | Executable | PE (Portable Executable) | PE File Layout | Win 64 Exe | x64 | Vidar Stealer | Go Loader (Factory-v3) | T1027 | T1055

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	adb0a3db727b4d5ec87ed6d4af4e16fa
Sha1	509a41b4922b627666dd371e78df2c969f46e61b
Sha256	6850a9d2b84bf20f741bf21af7476307220544cae9f6c0e67ce344d2784193e8
Sha384	9e7735a219053730fdf6262cc4609486a84e4e5050bb4f85cecfbc888a5485a5d0604bff9c127383c460047de97b7c50
Sha512	02f518c9ca924a1db60a7edd8665bc1981534509032ac74361c5826e3122bb3f2ae7b441456b53445d031ac3b70d604e78793bddf0dd47a84e7949d2022fdc2d
SSDeep	49152:xjInNwPAyQYyjiBz7Se69qt5r1cKn0eIfMCpFEC1rsBHOaak+ltR7MdTmsWmwBN:x+U+V+CNSHXaVT7ogB
TLSH	85D67B07A96546E5C485EE38C57B8352B678BC8D8B3173E36E50BA783F763D099B8340

PeID

HQR data fileMicrosoft Visual C++ v6.0 DLLPe123 v2006.4.4-4.12Private EXE Protector V2.30-V2.3X -> SetiSoft TeamtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:exe~T1027~T1055>bin

Shape pe:exe>bin

malicious 2 nodes

Name	Value
Info	PE Detect: PeReader OK (file layout)
Info	Authenticode present at 0xC39800 size 8072 bytes