Deep Malware Analysis of bb752a96b79494d66002610736fb7777 | md5: bb752a96b79494d66002610736fb7777 | Vidar Stealer | Go Loader (Factory-v3) | T1027 | T1055 | Executable | PE (Portable Executable) | PE File Layout | Win 64 Exe | x64

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	bb752a96b79494d66002610736fb7777
Sha1	966b02252a5eb1287b4fe9bcad08acc2e6b9f337
Sha256	b7f55acbce6cd8fc6402463dcbefc744e88d2827503c8722960b15b507f255c0
Sha384	f4db4a963053239971bc5933b517ab863cc5d575266ecf5dab03e0184621e04f454a031f3abcded87f3b45682454ef18
Sha512	b57665d0e5367edd8b22c3baa0fe5465d06bddec065f2edb7cd0f1ede258b3bec7a57d447481f170b3eb8d8fe8d291b592644f1bd005270c154bb1e6ee79ea4d
SSDeep	49152:LZaDyp7y66n5bwDOH816TPbEt2JUs8Gb:LNGJc16Km
TLSH	B3E59E07BCE149EAC499523185BB52A17B35FC190B3223D72E80B7382FB67D09D7AB51

PeID

HQR data fileMicrosoft Visual C++ v6.0 DLLtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:exe~T1027~T1055

Shape pe:exe

malicious 1 nodes

Name	Value
Info	PE Detect: PeReader OK (file layout)