Malicious
PE Executable
MD5: d197145d9ca63ded215154bb64c9dc40
Size: 3.34 MB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Size
3.34 MB · 3,344,232 B
First seen
2026-07-05 00:04 · 3 months ago
Last seen
2026-07-05 00:04 · 3 months ago
Last analysis
2026-09-03 21:34 · one month ago
Hashes
MD5
d197145d9ca63ded215154bb64c9dc40
Sha1
9c76c024469b7605f9ff575d7b5a9c68ebdfe57e
Sha256
c11aeec42a7f3c4e7895d37cf403b6900793226444dfc83ad2b85aab152e457c
Sha384
b33a28d4d52fbe222359d5219ec0b61ee0d46bc3e5c2476306a0a9c3888a0af3e10fccdddc566fe21391a8a7972c74dc
Sha512
063222e23f7f247048fb87517e5000ebdfe87bef312834c1568425d6c1eac50f4d7dde11cb24fb348cd4480c49708099835a9b134604e27d39961f52eeb5172f
SSDeep
49152:LKpjlRkiShIGxewjFi2chBDj5do7J+/RLpE3RIgo34KH0NlY7OI+RiTtHtnlOgCc:LI6eL5l5ci+gHtlj
TLSH
62F58B47BC9048FAC06AA331CAB69196BB75BC080F3223D72E90B7392E767E45D75714
Detection
PeID
HQR data fileMicrosoft Visual C++ v6.0 DLLtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!
1 malicious · 2 files
EXEd197145d9ca63ded215154bb64c9dc40T1027 · T1055Vidar Stealer
Structure
P7B[Authenticode]_51149ab7.p7b
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:exe~T1027~T1055>bin
Shape
pe:exe>bin
malicious
2 nodes
| Name | Value |
|---|---|
| Info | Authenticode present at 0x32FE00 size 2408 bytes |