Malicious
PE Executable
MD5: d11ea92f32b78f2eb2a85c8a6f722db3
Size: 6.37 MB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Size
6.37 MB · 6,372,064 B
First seen
2026-08-11 21:32 · 2 months ago
Last seen
2026-08-11 21:32 · 2 months ago
Last analysis
2026-09-03 21:34 · one month ago
Hashes
MD5
d11ea92f32b78f2eb2a85c8a6f722db3
Sha1
8f97bc0c1965b77b94c45a44cd8cef0a6984f096
Sha256
aa24437389e38fd323e24ae94715b0037f8edfd6e9c71c6aefd1bf5f6aaac57c
Sha384
d1581046842beaa1c2e0e97ec9ccbb44bf88cde0c559e56bac8927037c647aabad2478ec61c2fe63602717b773adcf15
Sha512
bc904577ef50615f8cff0054b4b182d76b9ed9beccbd7b1a419f4e71a3bd82c9c47911254c09a86e724f5c2673aa75ed8354152a319e8dc0f0236bf0f5f01613
SSDeep
49152:DfqvHh/FWvRx0+fquCm0Jd/g+3boNtx7qgCuiVRRN+RkpTvcUZpCzCzxQl:DEsfqzm0+HzCutRkpTVZNx6
TLSH
6A56590BBB9168B0C454E734487A5296BA74BC8EC734B3B31D91AD386F293D1693CB53
Detection
PeID
HQR data fileMicrosoft Visual C++ v6.0 DLLPrivate EXE Protector V2.30-V2.3X -> SetiSoft Team
1 malicious · 2 files
EXEd11ea92f32b78f2eb2a85c8a6f722db3T1027 · T1055Vidar Stealer
Structure
P7B[Authenticode]_c5537f95.p7b
BIN(folder)
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:dll~T1027~T1055>bin
Shape
pe:dll>bin
malicious
2 nodes
| Name | Value |
|---|---|
| Info | Authenticode present at 0x613170 size 2416 bytes |