Malicious
PE Executable
MD5: be54a37ac5d344156c3fd1357b50310d
Size: 3.63 MB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Size
3.63 MB · 3,631,016 B
First seen
2026-08-11 11:46 · 2 months ago
Last seen
2026-08-11 11:46 · 2 months ago
Last analysis
2026-09-03 21:26 · one month ago
Hashes
MD5
be54a37ac5d344156c3fd1357b50310d
Sha1
30a11744e754541ad42fc83ae837016a2f5134ac
Sha256
079a62b56e5f91bb4cc1cb238f00a69b0a6fb827bb32119ba542a5ee6d18f4c1
Sha384
2849c51ebb37663931dbaee10be33438e433f6247db2b1fc9a808713bfed41c6443db64cb6de8c4670bf45cefdea10f8
Sha512
0b4394e4a44884a869eaffb26f901ebe761f2246dfc796091a6895ffcae70bccb5cb3660f5fc41b0d78277d408320977e21ceb448aabe025d34bb91e0d363c8d
SSDeep
49152:rCx5TIKxX9dC8NbIgPJnh4abtfd5Vj4Cxc/:rCs8IgPEwtdb0qw
TLSH
ABF56C47EDE048EEC06AB63589F255863B36BC091B3527D32E54B7382E76BD05C3A718
Detection
PeID
HQR data fileMicrosoft Visual C++ v6.0 DLLtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!
1 malicious · 4 files
EXEbe54a37ac5d344156c3fd1357b50310dT1027 · T1055Vidar Stealer
Structure
P7B[Authenticode]_8dfa1e3a.p7b
BINResources
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:exe~T1027~T1055>pe:rsrc>bin
Shape
pe:exe>pe:rsrc>bin
malicious
3 nodes
Path
pe:exe~T1027~T1055>bin
Shape
pe:exe>bin
malicious
2 nodes
| Name | Value |
|---|---|
| Info | Authenticode present at 0x375E00 size 2472 bytes |