Malicious
PE Executable
MD5: ca21b1781187590ad0f04168d81acac9
Size: 13.4 MB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Portable Executable file
Size
13.4 MB · 13,403,544 B
First seen
2026-09-03 12:45 · one month ago
Last seen
2026-09-03 12:45 · one month ago
Last analysis
2026-09-03 21:34 · one month ago
Hashes
MD5
ca21b1781187590ad0f04168d81acac9
Sha1
a132c9d59dadfef6c191e83827388900ee9825b1
Sha256
061041fbe67a10d5bf869456c91d18b1091b17f02d76e8577699e71f818c240a
Sha384
7275ca486a682614d490c71a44120415bf9ec27514eddb89b0fd24f9e63a3dbc8fcca758ed3297486eb04fc6a763923e
Sha512
662b7e9076c03c11b954d55d8e69cf29f72fa616ca6bb27869cf1f5216aaf1afa72c78c38a9d955a5c30d54e070b2be9b6ebf7642ced6bab02084056f410fbd1
SSDeep
393216:pVcf++3S/RjAI9XXvPQ/Jdf8mdTwR91Wte4494UhazWC+n6tWrIBgSZMVHszY/+U:vBb
TLSH
C4D64B03A95644F8C5A1EF39C6B79E91BA6CB84CC33437B71E50DAB42F223D1A979740
Detection
PeID
HQR data fileMicrosoft Visual C++ v6.0 DLLPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!
1 malicious · 2 files
EXEca21b1781187590ad0f04168d81acac9T1027 · T1055Vidar Stealer
Structure
P7B[Authenticode]_4069fd21.p7b
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:exe~T1027~T1055>bin
Shape
pe:exe>bin
malicious
2 nodes
| Name | Value |
|---|---|
| Info | Authenticode present at 0xCC6600 size 8088 bytes |