Deep Malware Analysis of c31991f6adba0cd505e1e8f59cdf0b9d | md5: c31991f6adba0cd505e1e8f59cdf0b9d | Vidar Stealer | Go Loader (Factory-v3) | T1027 | T1055 | Executable | PE (Portable Executable) | PE File Layout | Win 64 Exe | x64

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	c31991f6adba0cd505e1e8f59cdf0b9d
Sha1	9a90dfde0b02cb410c7f79f6529ad2aade4e1969
Sha256	f601cde9845b729dcbbcd0b8b972baff995c8ed2b81f5469ffd1693051b44fc7
Sha384	090d24d7f9cc087dd4d55b4a41d1b85cd0c5b72ff75c0fae679cc7f910910b95a111c66f0981b01b1c771082a6dd8b48
Sha512	c041bfeaec832918b462ae987741bdd8b2b7a6838d29338aa0bc7e89f9574749e2263b9e74355b8ad3358ef89f7a2f2acf9d98f75069083050d427b3e767c890
SSDeep	49152:CTQ9jBwm0Vh0vLf/mZZETIz3q83ISp8z8mUFQc32PfwGfysLwYMIawQwYu+:CS+h8/ITqiIoVywVcwYM6
TLSH	D926AE076C88946AC1A59B35886A11527B60FC5CD73233EB2F50F7B82F72BC05D7AB49

PeID

HQR data fileMicrosoft Visual C++ v6.0 DLLPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:exe~T1027~T1055

Shape pe:exe

malicious 1 nodes

Name	Value
Info	PE Detect: PeReader OK (file layout)