Deep Malware Analysis of cbfdc0774c54d016bf35923d3c5603ae | md5: cbfdc0774c54d016bf35923d3c5603ae | Vidar | Go Loader (Factory-v3) | T1027 | T1055 | Executable | PE (Portable Executable) | PE File Layout | Win 64 Exe | x64

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	cbfdc0774c54d016bf35923d3c5603ae
Sha1	8026788ad7f9ea95083c3e8610b173bf6559f87f
Sha256	921ae4b0d4344348a744504a68a434bf82e941a3575172be4bf6f929c08b89c6
Sha384	6adcfd95d01a1e99d91c90f62f07eb56534c6009011efab363d411bc1ab2d9c9a417c13f17db17295f8cfce596e85b78
Sha512	aae2fd505fa5a92c330aedb5aed1df3dbfd73dac7ebfd290c36efd2fd6ab5a052952e935792e147df660e248d0b55e9090b147c759443c346e89a0013605849e
SSDeep	49152:TtJfRMNuG8tTB/s7oaKgG/sdEjGzllIDXeNv8TuqBvjPZ6GAoQF6NJ66z:TZY7saJZqBvixk66z
TLSH	25369C03BEA588F0C0DAE235C57262817778BC5D473237EB2E20AA393E367D15A75761

PeID

HQR data fileMicrosoft Visual C++ v6.0 DLLPrivate EXE Protector V2.30-V2.3X -> SetiSoft Team

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:dll~T1027~T1055>bin

Shape pe:dll>bin

malicious 2 nodes

Name	Value
Info	PE Detect: PeReader OK (file layout)
Info	Authenticode present at 0x4D0868 size 2416 bytes