Deep Malware Analysis of e3d9e22dc9155d26f744d76422b59b9c | md5: e3d9e22dc9155d26f744d76422b59b9c | Executable | PE (Portable Executable) | Vidar Stealer | Go Loader (Factory-v3) | T1027 | T1055 | PE File Layout | Win 32 Exe | x86

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	e3d9e22dc9155d26f744d76422b59b9c
Sha1	d382e44d2260ab520b5359e9bb4cdf8bf2289d1d
Sha256	1b9da9e4c6c8e4a3a9f26aac2ddfff7e8c66131da82abb53167a954bfbaeaf9c
Sha384	a960a28107aeac16a9ba574093c22bdbe39e85e2feffaefd99c9aa3508d57ca64f316ad4f35e69823e4601b708959cf2
Sha512	047bd2776b3254d9303704f0475019b48e37763136f4be963fc0f599c4c57425e7e658fe3264f706924c008f60e251006a0bb88c2cf5ff638632fe0f1264452d
SSDeep	98304:XrN2aXdrjxCaTbqAEEC6K7M4pG2IfdED:saxdTe0C64MD2D
TLSH	C7C65C11FACB54F6F9036831416BB27F23315D048B28DB9BEB583B6AF8776911C6A305

PeID

HQR data fileMicrosoft Visual C++ v6.0 DLLPeStubOEP v1.xPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:exe~T1027~T1055

Shape pe:exe

malicious 1 nodes

Name	Value
Info	PE Detect: PeReader OK (file layout)