Deep Malware Analysis of c1d7a0d80b01eb4510794aeae8975701 | md5: c1d7a0d80b01eb4510794aeae8975701 | Vidar | Go Loader (Factory-v3) | T1027 | T1055 | Executable | PE (Portable Executable) | PE File Layout | Win 64 Exe | x64

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	c1d7a0d80b01eb4510794aeae8975701
Sha1	f374a62a64634169e258e85517edeb77baa64352
Sha256	2d98b52d5a7415acdddb848542e4f96cd0c7952bf6e6ee2b0d39f5a120236d57
Sha384	69bf599ab24467f6e8064f89fc125a8ee76074f4eca89590cd051806fce51b26ad9b10803689dfc1255385472f14afcd
Sha512	0ef2ec5ed8930f2d9dc3747e937537d80acada7bb78f3bb4b017e360a8334555d779da7b9c262cd94101de2f8cdf64ae62bacd322d44c53637c31da38b1570c1
SSDeep	393216:QkN7WMAhpBbRV+UQVdSCYM9rjyzYHgd/vT+30uh7BsAxy8SHtcUbZyeSc49gMfRc:Dp5xGTneNrg
TLSH	58E65AC3AA5244F7D941DF39C4778231A969B88FC73137B76E909AB42F223D0A979740

PeID

HQR data fileMicrosoft Visual C++ v6.0 DLLPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:exe~T1027~T1055>bin

Shape pe:exe>bin

malicious 2 nodes

Name	Value
Info	PE Detect: PeReader OK (file layout)
Info	Authenticode present at 0xDBAC00 size 8088 bytes