Deep Malware Analysis of c44c1362f1afd034b7f7dc32ab0b6b07 | md5: c44c1362f1afd034b7f7dc32ab0b6b07 | Executable | PE (Portable Executable) | Vidar Stealer | Go Loader (Factory-v3) | T1027 | T1055 | PE File Layout | Win 64 Exe | x64

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	c44c1362f1afd034b7f7dc32ab0b6b07
Sha1	4fe4eed55d56b8579df02d0d1920e2ad2bf43bb5
Sha256	81541906f6dce59ade5c332112ef2d2f1f5861b1d855dfb2d1a5e2b52335bddc
Sha384	7f5ac8e47ea01b4688b997d3f974d992f4e7a50a8fa9b9886c035ef3394c937ba034595b45bb938729396e833f95b7a3
Sha512	01ba8e368707442358b3f7f6f762d66ab334d44d568ce5e74ac5d9e9663016ae6673e99c4f7415b6ea4a62c5ff680cdb2365e1cfe6ee8463eeb03b9e8d111bc7
SSDeep	49152:98vy9z7iMP7DhNvzCDlqSfbof9bc2mnsZ61BmD8uqmEfJjjvfliZ:9dolqh0scmD9qmQlfliZ
TLSH	EA167C57B9A049ADC096B33084A36652BB7C7C480B3627E32F6177361E72FE1AE75344

PeID

HQR data fileMicrosoft Visual C++ v6.0 DLLPrivate EXE Protector V2.30-V2.3X -> SetiSoft Team

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:dll~T1027~T1055>bin

Shape pe:dll>bin

malicious 2 nodes

Name	Value
Info	PE Detect: PeReader OK (file layout)
Info	Authenticode present at 0x414EA8 size 2424 bytes