Deep Malware Analysis of ec62ee8191a9132d7b5c3471f3af6e31 | md5: ec62ee8191a9132d7b5c3471f3af6e31 | Vidar Stealer | Go Loader (Factory-v3) | T1027 | T1055 | Executable | PE (Portable Executable) | PE File Layout | Html | Win 64 Exe | x64

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	ec62ee8191a9132d7b5c3471f3af6e31
Sha1	fc024b38e7d80df88f8001f64eb6f5a5eafcd45a
Sha256	7ba7f57195d202d87f28190340eaafd1222319ac60e64ba35c0803730ee0b706
Sha384	34f6680ab634d80e50e0b2b803bdfd0f73d344c62cffc55f7079ce80915ec6ac1f56ff9f11b27d4a74cfee01a3521f8e
Sha512	4a0e5f28ab02bc37fa1247116e4efa6f23cbb66547198d8130c0ac7c1b2ca36bcd88d127674aba02c86052ef1c2d7d6a520a926eadfb8d138c9bb6d80398c41d
SSDeep	49152:7omQuRHpxe1U9swfmg/IiCjvVzcyNZuLS87p7gxFPL0YzMmt7rOi6CVjnBb1cUIF:7ru1Vw+viCjRcwX8d7gvPImtPB9fiF
TLSH	69467C0778D550F8C59A8735C57A4222BA35BC98CB3537E32E40EA742F67BD279B9B00

PeID

HQR data fileMicrosoft Visual C++ v6.0 DLLPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:exe~T1027~T1055>bin

Shape pe:exe>bin

malicious 2 nodes

Name	Value
Info	PE Detect: PeReader OK (file layout)
Info	Authenticode present at 0x549600 size 8096 bytes