Deep Malware Analysis of dd82cefd1f259fd698ff705131149948 | md5: dd82cefd1f259fd698ff705131149948 | Executable | PE (Portable Executable) | Vidar Stealer | Go Loader (Factory-v3) | T1027 | T1055 | PE File Layout | Win 32 Exe | x86

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	dd82cefd1f259fd698ff705131149948
Sha1	328dc7327ee3c970d572527d5fbb6eafb9bd2664
Sha256	823088a9553028e30dfbf90e27ef87d4b563f96dfc9f6baafcb29e71addac551
Sha384	c14309f75b35fc4a0a977ab87361d2f7463e4842c73e43464237059e9178bacad7fc3d47a895ec695b9a330e3accf99e
Sha512	fa08427f00f6ac7f63cb5930177e88cb490614221aa02871456ef175fbcf6277ecf745a94bd254b8e80e2a0086e957348f891254da5a0b47a9d9a488e1b61b27
SSDeep	196608:KjkX5gh3bgOsrpanpccRpRFGYybb7vRQS:Ta31s4XRFGJf75
TLSH	BEA68C41FECB99F2E9032831056BB22F63305D064F24CBD7EB417F6AE9776A11836249

PeID

HQR data fileMicrosoft Visual C++ v6.0 DLLPeStubOEP v1.xPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:exe~T1027~T1055

Shape pe:exe

malicious 1 nodes

Name	Value
Info	PE Detect: PeReader OK (file layout)