Malicious
PE Executable
MD5: ca392fa049454d7e0df53d36ece744ad
Size: 7.57 MB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Size
7.57 MB · 7,569,920 B
First seen
2026-08-10 15:08 · 2 months ago
Last seen
2026-08-10 15:08 · 2 months ago
Last analysis
2026-09-03 21:34 · one month ago
Hashes
MD5
ca392fa049454d7e0df53d36ece744ad
Sha1
121d8d334ad57d5dd23faddeaef329c116f4b07e
Sha256
9d1e77734deeba795a937e36e8c661b961846852d73ee90d56e2a5cf80438c2a
Sha384
02b52cfce7e81a9c5b0ef8c55553282dec34a2d6060e27b80e76932887f5090eb05c8cf8d417438a51fe6ce455c64645
Sha512
c817d73c681c60112ad1e3286892c7a16ceafa8ad9751f548de0c26f49eecaff60032639b1d7a14ef0469d3153c8fdd10ec7f9fe0e6c21d4b54b64386ba8918e
SSDeep
49152:kYbJhn8kXzm481K5XXA4DjLva5Nf2EfSM6HJoTkgAwqc:kKTCOXBj8Nf2qSM6HsU
TLSH
58767C07FC9149F6C0AA933189A35252BB75B8181B3227EB2EA0B6783F737D05D35758
Detection
PeID
HQR data fileMicrosoft Visual C++ v6.0 DLLPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamUPolyX 0.3 -> delikontElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!
1 malicious · 2 files
EXEca392fa049454d7e0df53d36ece744adT1027 · T1055Vidar Stealer
Structure
BINOverlay_40093156.bin
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:exe~T1027~T1055>bin
Shape
pe:exe>bin
malicious
2 nodes
| Name | Value |
|---|---|
| Info | Overlay extracted: Overlay_40093156.bin (3787264 bytes) |