e2a91f0396123cf3bf3f22901a67cdb1

PE Executable

MD5: e2a91f0396123cf3bf3f22901a67cdb1

Size: 2.94 MB

application/x-dosexec

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

File

Size

2.94 MB · 2,939,248 B

First seen

2026-07-04 07:31 · 3 months ago

Last seen

2026-07-04 07:31 · 3 months ago

Last analysis

2026-09-03 21:34 · one month ago

Hashes

MD5 e2a91f0396123cf3bf3f22901a67cdb1 Sha1 96e10062d9bb2acfa434d92d5e7a749172fe5ebe Sha256 1c35c9ed37898f27c598828a4216100ac2676583c745fd380f32b0a8c27e7ed2 Sha384 cdc48d082d045c02130b15ba529a00e877e83e4743870bd20472231147cfa27880889cfcbf27ffcb5683ca54a688e811 Sha512 be636c7b6a25367a3dbf785473d60dc8c7cbc5365f51ceb2940997702352f95691565ee1a3df2d7fc87a324dc173a7e29cca37a02578fcabc47bae6ccfd79c85 SSDeep 49152:z4FxY/LVoHRQl8662dmU7FZfZ+gr4jXisr5g8B:z4Qh85if7Z+gkDis9ZB TLSH 4FD58D476CE059F9C899A33189B251917B75BC194B3233C32E90B7782F72BE06D79B84

Detection

PeID

HQR data fileMicrosoft Visual C++ v6.0 DLLtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!

1 malicious · 2 files

EXEe2a91f0396123cf3bf3f22901a67cdb1Vidar Stealer

Structure

P7B[Authenticode]_71fcd00c.p7b

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:exe~T1027~T1055>bin

Shape pe:exe>bin

malicious 2 nodes

Name	Value
Info	Authenticode present at 0x2CD000 size 2416 bytes

1 malicious · 2 files

EXEe2a91f0396123cf3bf3f22901a67cdb1Vidar Stealer

Structure

P7B[Authenticode]_71fcd00c.p7b

No malware configuration was found at this point.