Malicious
PE Executable
MD5: add0230dd2b8aed2b45ef888f73cfa2c
Size: 14.1 MB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Portable Executable file
Size
14.1 MB · 14,100,376 B
First seen
2026-09-02 17:45 · one month ago
Last seen
2026-09-02 17:45 · one month ago
Last analysis
2026-09-03 21:26 · one month ago
Hashes
MD5
add0230dd2b8aed2b45ef888f73cfa2c
Sha1
a398c00a4176d046f5e9c91651217ae07f73dfdb
Sha256
54f357085654328bd580509c209789143d7ecd360e706cfab00e40071de6c3f5
Sha384
180fbda41c2ffe5645c8d2defee9c3f95c95a7a633580c6587c1ab186bbf0fc492b16fc860f1e56b92f2dfc3baf060b6
Sha512
e46f32723c5d6b3f1493415308a793927babdcb1419ff051a179a7a6f5cd091aa13f0907a696f63577478d88252fa3016184f75d09be46e36357bc478f079b9b
SSDeep
393216:MSJR5SU0W5nKgpjkZRJRB/EpYi6dO8yz+qzUPerQGwzgRNOqMUHnc7fB+2upHjn1:28jd
TLSH
B0E66B03A94215E4C6B19B39C7B393C1B6ACB89CCB3137B73E54A6742F223D1A979744
Detection
PeID
HQR data fileMicrosoft Visual C++ v6.0 DLLPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!
1 malicious · 2 files
EXEadd0230dd2b8aed2b45ef888f73cfa2cT1027 · T1055Vidar Stealer
Structure
P7B[Authenticode]_ffdf83e3.p7b
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:exe~T1027~T1055>bin
Shape
pe:exe>bin
malicious
2 nodes
| Name | Value |
|---|---|
| Info | Authenticode present at 0xD70800 size 8088 bytes |