Deep Malware Analysis of b135d924f409aeb7be55feacd68e946f | md5: b135d924f409aeb7be55feacd68e946f | Executable | PE (Portable Executable) | Vidar | Go Loader (Factory-v3) | T1027 | T1055 | PE File Layout | Win 64 Exe | x64

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	b135d924f409aeb7be55feacd68e946f
Sha1	a7b0d89d2f4f846e38ce3c4ea904d16113fda9ea
Sha256	40b643468356c0fd751893647ad0dc9e2a0019427e4f5f0e2f6e559efcecb977
Sha384	20f819f5719d561faf1fdab1217647d6b720da599a75703c257f18b0fa86cf46d444aaf64f4d87417b8d2d6f566e8b7b
Sha512	097063c6e5ec58e5f314aaaeaa7f55eafc12ed58829e2258d674bdac1bae1bb92e521752502f103e1ae9710f64502ff8bae1e3b919506930077a7ec80ee3c76a
SSDeep	98304:JjxkpalhmhcBwROSWaUVJTOdTEo3qYScS4y:JtmalhccBwRNUnToQky
TLSH	A1667C0B3E8081A5E49ED63995B75252AB34BC4C9F7633D72D50B2301F763E42BB9B48

PeID

HQR data fileMicrosoft Visual C++ v6.0 DLLPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:exe~T1027~T1055>bin

Shape pe:exe>bin

malicious 2 nodes

Name	Value
Info	PE Detect: PeReader OK (file layout)
Info	Authenticode present at 0x6AFC00 size 8112 bytes