Malicious
Malicious

eb0da5f19b4395355e77c8da57d7266a

PE Executable
MD5: eb0da5f19b4395355e77c8da57d7266a
Size: 2.96 MB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
File
Size
2.96 MB · 2,959,736 B
First seen
2026-07-05 00:04 · 3 months ago
Last seen
2026-07-05 00:04 · 3 months ago
Last analysis
2026-09-03 21:34 · one month ago
Hashes
MD5 eb0da5f19b4395355e77c8da57d7266a Sha1 ae22f19ee1036f18f42a9fb9cfd203d0f15d6766 Sha256 4521f532bf22c3155a95a71c4797253680dc60618c74c18522506a603ef43a03 Sha384 3a397cc1bf56170d4ec7e4d450772366aa5d2fdb6c882d67fe880112060c8b47006c0019b4a290c759e2de1f3bd0c1fd Sha512 6ffd00f2d99a2324b66428de89a70d528b286a5f4cfae166d321de9aec9af490d80f235022bd49be21e3203cb575fc19c644d766aa1b49e3a426bbfde12b0e93 SSDeep 49152:mv8RCDoF8Zt/ZTqYH26qbumU/FphRlMWcazv70CSg:mvFDJKumUtLRqWcabw TLSH 11D59D0B7C9109E9D8AA633688B251927B79BC450F3623D33E90B6783F727E19D39741
Detection
PeID
HQR data fileMicrosoft Visual C++ v6.0 DLLtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!
1 malicious · 2 files
EXEeb0da5f19b4395355e77c8da57d7266aVidar Stealer
Structure
P7B[Authenticode]_b0b147c6.p7b
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path pe:exe~T1027~T1055>bin
Shape pe:exe>bin
malicious 2 nodes
Name Value
Info
Authenticode present at 0x2D2000 size 2424 bytes
1 malicious · 2 files
EXEeb0da5f19b4395355e77c8da57d7266aVidar Stealer
Structure
P7B[Authenticode]_b0b147c6.p7b
No malware configuration was found at this point.
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙