Deep Malware Analysis of d83f3488e6729304b7e6b875b210fb22 | md5: d83f3488e6729304b7e6b875b210fb22 | Executable | PE (Portable Executable) | Vidar Stealer | Go Loader (Factory-v3) | T1027 | T1055 | PE File Layout | Win 64 Exe | x64

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	d83f3488e6729304b7e6b875b210fb22
Sha1	3b985940dc4be5a8eb42d1713d5b50ab587737f1
Sha256	7bcfc5863f119c8904ba0a5ade201e3dc3c17981a51d81ff13ef90d08edd4101
Sha384	ffc52421dfc62e2cc51226eea72ca76e32adb1f9da368b4d9cdcf1b334cda2c6265075454e249be05863d8e3396ac07d
Sha512	ee1ed83df4edbabd59aed6eb48e14f6db18df58ea9b978ea339d09400c5cb9d91f0908bd2de9060826d0b2a5c7128945885ef8eb2fcc1781e63ddeb022a2116e
SSDeep	49152:S87NQjnAT/LKUH3KOMLPGDEAt3tW1x+p2AxruQTJc0Mj3dCct:Sa61xAdsrtZ
TLSH	62266B13BC9488E9C06AD73AC56A8262FAB1BC084F3173E77E51B6782E377E05539714

PeID

HQR data fileMicrosoft Visual C++ v6.0 DLLPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:exe~T1027~T1055>bin

Shape pe:exe>bin

malicious 2 nodes

Name	Value
Info	PE Detect: PeReader OK (file layout)
Info	Authenticode present at 0x471E00 size 8048 bytes