Malicious
PE Executable
MD5: eb18026ffd53e78377e613faf011a7b8
Size: 4.72 MB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Portable Executable file
Size
4.72 MB · 4,718,968 B
First seen
2026-08-11 22:46 · 2 months ago
Last seen
2026-08-11 22:46 · 2 months ago
Last analysis
2026-09-03 21:34 · one month ago
Hashes
MD5
eb18026ffd53e78377e613faf011a7b8
Sha1
7f905cff9add06d65b9c1674ff280043fe72aa26
Sha256
93cf6b3cfc0e49213e384bbcf86d5930f96125b62e1940d7334642e40bf56e54
Sha384
8a1ffb4ded5fcb12e91037b6e58f8aa989c404a36970b4292332e1431c5dd2196ac95744c1576ade901e7620032fe99e
Sha512
c9a1f8ca165f8cdd22439d540d129cc35f4eb3f7de991bb8007c93aac4d0e8c579fd372829a51b2a5bd659311b64558f3cd0e991f25f0f82c809c22d3a95f0d5
SSDeep
49152:ap959FIFIi27djAmuUlFoxRuS4wqiBuJ6JyxNBKpsKCsHpwnA0y0E:aXbJlFoxRugMRsJwna0E
TLSH
A3266B03BE9158F9C095E73589B74252BA74BC4C9B3133E32E60AAB42F763C06D79B51
Detection
PeID
HQR data fileMicrosoft Visual C++ v6.0 DLLPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!
1 malicious · 2 files
EXEeb18026ffd53e78377e613faf011a7b8T1027 · T1055Vidar Stealer
Structure
P7B[Authenticode]_9248005f.p7b
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:exe~T1027~T1055>bin
Shape
pe:exe>bin
malicious
2 nodes
| Name | Value |
|---|---|
| Info | Authenticode present at 0x47F800 size 2424 bytes |