Malicious
PE Executable
MD5: e2a91f0396123cf3bf3f22901a67cdb1
Size: 2.94 MB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Size
2.94 MB · 2,939,248 B
First seen
2026-07-04 07:31 · 3 months ago
Last seen
2026-07-04 07:31 · 3 months ago
Last analysis
2026-09-03 21:34 · one month ago
Hashes
MD5
e2a91f0396123cf3bf3f22901a67cdb1
Sha1
96e10062d9bb2acfa434d92d5e7a749172fe5ebe
Sha256
1c35c9ed37898f27c598828a4216100ac2676583c745fd380f32b0a8c27e7ed2
Sha384
cdc48d082d045c02130b15ba529a00e877e83e4743870bd20472231147cfa27880889cfcbf27ffcb5683ca54a688e811
Sha512
be636c7b6a25367a3dbf785473d60dc8c7cbc5365f51ceb2940997702352f95691565ee1a3df2d7fc87a324dc173a7e29cca37a02578fcabc47bae6ccfd79c85
SSDeep
49152:z4FxY/LVoHRQl8662dmU7FZfZ+gr4jXisr5g8B:z4Qh85if7Z+gkDis9ZB
TLSH
4FD58D476CE059F9C899A33189B251917B75BC194B3233C32E90B7782F72BE06D79B84
Detection
PeID
HQR data fileMicrosoft Visual C++ v6.0 DLLtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!
1 malicious · 2 files
EXEe2a91f0396123cf3bf3f22901a67cdb1T1027 · T1055Vidar Stealer
Structure
P7B[Authenticode]_71fcd00c.p7b
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:exe~T1027~T1055>bin
Shape
pe:exe>bin
malicious
2 nodes
| Name | Value |
|---|---|
| Info | Authenticode present at 0x2CD000 size 2416 bytes |