Malicious
PE Executable
MD5: cf70216ebc78195a5baf74a272115a16
Size: 3.34 MB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Size
3.34 MB · 3,338,088 B
First seen
2026-09-02 17:45 · one month ago
Last seen
2026-09-02 17:45 · one month ago
Last analysis
2026-09-03 21:34 · one month ago
Hashes
MD5
cf70216ebc78195a5baf74a272115a16
Sha1
355b2a0b7f9e6e30a5d7a22f687f65ad577c6d34
Sha256
a415b68903698f63cc942a73d415993dee8c21992adb4b838a393b9f6a77cd93
Sha384
7cf95b8726df8e859d29099413334d8b9d0ac5f01f5a12c509278d5bcd853869386d72b271a79a352f3435fdf3088040
Sha512
bb7615151ba52884ac0d35280ea3d390c6e3d65945a205b833a90ceac81f73f0bc1c4370a8df0be62ccddf8a4b9b09e3a80d961e90362c236b4a2791dd314b1f
SSDeep
49152:d555yqRuNGM2x8LOVIRfURqIsYi0JsSLl2N83fVJ:dAwd9Wu5l2N+J
TLSH
8DF59E477CA149FAC499923289B72252BB30BC490B3177D72E90B6783FB27D08D72B55
Detection
PeID
HQR data fileMicrosoft Visual C++ v6.0 DLLPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!
1 malicious · 2 files
EXEcf70216ebc78195a5baf74a272115a16T1027 · T1055Vidar Stealer
Structure
P7B[Authenticode]_27c6f1dd.p7b
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:exe~T1027~T1055>bin
Shape
pe:exe>bin
malicious
2 nodes
| Name | Value |
|---|---|
| Info | Authenticode present at 0x32E600 size 2408 bytes |