Deep Malware Analysis of c9e798462943f33ef81ee2ef2406b83b | md5: c9e798462943f33ef81ee2ef2406b83b | Stealer | Vidar Stealer | Executable | PE (Portable Executable) | PE File Layout | Win 32 Exe | x86

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	c9e798462943f33ef81ee2ef2406b83b
Sha1	97c8100c3481d6b5cd4597ae3871ff0cdbb1e5f5
Sha256	42420ed30965b2e8cd0abfe59103f9352cf9e8bb9a1c75d340bf13b2660abda5
Sha384	dd8332acaffb3bab3a141c1736b94c3c7300cc6755eaaf6c216a4e436fc03636d77947c92f7a78df30d7efd87a842892
Sha512	ff2134a540ad2c3e2e5a1b69d4615d20510e050df7dc208c8899d47a082ce6c86d3bbdf0611bd7c4d9fffdb747c52e90dc3ea6450691f4a1148792ea22a5b1da
SSDeep	3072:0XFiAVA5v6if7FMwrrInnjpE6Ux68XEPK8NcN:yFih5v1mwrr0Xt1y8Nc
TLSH	E6B37B2172E0C072C097253199F9EBB24A7EF93103B854CBB7E8167A5F603C16A7539B

PeID

Microsoft Visual C++ 6.0 DLL (Debug)Microsoft Visual C++ 8Microsoft Visual C++ 8Microsoft Visual C++ v6.0 DLLVC8 -> Microsoft Corporation

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 1 STICH kept: 0secondary ignored: 1

bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

0 / 0

No STICH Path matches the filter.

Name	Value
Info	PE Detect: PeReader OK (file layout)