Deep Malware Analysis of d41a3e5ac990724af26f90e1e2ff6975 | md5: d41a3e5ac990724af26f90e1e2ff6975 | Vidar | Go Loader (Factory-v3) | T1027 | T1055 | Executable | PE (Portable Executable) | PE File Layout | Win 64 Exe | x64

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	d41a3e5ac990724af26f90e1e2ff6975
Sha1	5f3d78308f5ac8a16ee4739adc1412b02a6e4c4c
Sha256	fd1cba0ec28b5b8e66ce1ea0916689e0afd390c344c0ae372c9ebb782c611fcd
Sha384	9c00a2ad951ed911fdbdd80b1130100d9261a4a54f41af53031a415fe28404bd840b13d636dc1b8694b025f874ce26a9
Sha512	36acb2ed95261f305acad3151539f86496b2659c4cb40ee97634b7149c8a6dca0395acfa71285aa251fcef7a9143875ac2028ac5ef69444dd27a4e15f3f655e4
SSDeep	49152:QQRQDEAs+c9yhakwV5jXO79FZIWo/ECtlmOVr8uonfrttOy6h5+8mlzwirp6WmRj:Qq4iVronzt+jPWwirLc
TLSH	AF667C07BDA501E8C89AC634C4BB53427AB8B88D4B3577D71E10B6343F7A7D8A976708

PeID

HQR data fileMicrosoft Visual C++ v6.0 DLLPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:exe~T1027~T1055>bin

Shape pe:exe>bin

malicious 2 nodes

Name	Value
Info	PE Detect: PeReader OK (file layout)
Info	Authenticode present at 0x662400 size 8104 bytes