Deep Malware Analysis of d46f0a564c18cc0d4ab38cb3985b4da0 | md5: d46f0a564c18cc0d4ab38cb3985b4da0 | Executable | PE (Portable Executable) | Vidar Stealer | Go Loader (Factory-v3) | T1027 | T1055 | PE File Layout | Win 64 Exe | x64

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	d46f0a564c18cc0d4ab38cb3985b4da0
Sha1	a0e492c9b674b7c383207603399d05613331477a
Sha256	0104d56f6608d319a9e148f6d77926fb41a37b7dd3dede9262f396c6b8e67176
Sha384	07e5c014b80c742cf72fa75b70617217dc02bd15fcceb6120fb8a03aa0ea8b6663e9fc56ba2c7edbbe7799b6d3fff85f
Sha512	7485c9515d406da51f16bc313e969e61b0f66f1f66d03f5f919e15312530ce96c4d69008668082ac1a795d1f3a7090df837fa77f195ab6d5782cf2c8704f8053
SSDeep	49152:r/+LSckKZF2IZGO/WocNXtSu1oYYeIgmL+7AMPH/3+8BYWTpLiTpuzkXlh3fK7KE:rKf20G3973/+Al84EhmaEaE
TLSH	64564A07EC9549E9C0AAE2358A679253BF717C485B3523D32B90F7282F76BD06E79340

PeID

HQR data fileMicrosoft Visual C++ v6.0 DLLPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:exe~T1027~T1055

Shape pe:exe

malicious 1 nodes

Name	Value
Info	PE Detect: PeReader OK (file layout)