Deep Malware Analysis of d2b0013a720cdad2c45777f7d3590a42 | md5: d2b0013a720cdad2c45777f7d3590a42 | Vidar Stealer | Go Loader (Factory-v3) | T1027 | T1055 | Executable | PE (Portable Executable) | PE File Layout | Win 32 Exe | x86

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	d2b0013a720cdad2c45777f7d3590a42
Sha1	8d199f624b0b64f8e584b450eb3bbbaa786df368
Sha256	779d1231bfaab9eab75e66187b606997247d95d2b071c20dafd33cf4791515c0
Sha384	6c1fb111aa23f75daf2745138668ce8bd36cafedbac157e427833632a576eb68304e5feb82daf2c495d2cf91401bc1db
Sha512	a02bfc40e07dc5a899139200b9a4327185a7f74821a8bfd9a962c540ee80b8c2ae1fccf226b7aaba42a3dc97a32d307220c409e949027d112c4e845d69aa3fff
SSDeep	98304:NGsqTIVri2C3jGdD4/LoAr4i3HVd7EqO/:+Tx3jUDsdrTeqO/
TLSH	D7C65C11FACB54F6F9036831416BB27F23315D048B28DB9BEB583B6BF877691186A305

PeID

HQR data fileMicrosoft Visual C++ v6.0 DLLPeStubOEP v1.xPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:exe~T1027~T1055

Shape pe:exe

malicious 1 nodes

Name	Value
Info	PE Detect: PeReader OK (file layout)