Malicious
PE Executable
MD5: b20629b8d3030d4883f93eb9e12884f0
Size: 4.52 MB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Portable Executable file
Size
4.52 MB · 4,515,328 B
First seen
2026-09-04 11:15 · one month ago
Last seen
2026-09-04 11:15 · one month ago
Last analysis
2026-09-04 11:15 · one month ago
Hashes
MD5
b20629b8d3030d4883f93eb9e12884f0
Sha1
3edb10f6ac49afe68a403110ac41d58726185162
Sha256
42f2f118c669f07f7a7f0b0834cc53d2800f01ab39304694c32bb06859ca6b23
Sha384
3a3caaaa3499228a505160999d267d1733eb1f4cdf0ae4bad29e90a159b2367c14c496210ab0f243b18dff6d8b21246b
Sha512
edde8708f4671c4a8b731e1db788070860de0690915338c7c790c1edfea21670108c2be53ec653dd9604730ea29324445b9c3052615d52a738f4c35e6d28719a
SSDeep
49152:pZSl4qa9WP9TI3eTsIcu6nbQ3OBRAqRr1sJwCoTx3P6Jiq5GlWxbg6:pEa3AzzqDsOtTx3Ciq5GlW
TLSH
0E267C077A9549F9C0A9E735C8BB5221B670BC0D8B3133E32E506AB82F723D19D79B54
Detection
PeID
HQR data fileMicrosoft Visual C++ v6.0 DLLPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!
1 malicious · 1 file
EXEb20629b8d3030d4883f93eb9e12884f0T1027 · T1055Vidar Stealer
Structure
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:exe~T1027~T1055
Shape
pe:exe
malicious
1 nodes