Deep Malware Analysis of f1ce9e4aae6692fb034cdcc5ad29966b | md5: f1ce9e4aae6692fb034cdcc5ad29966b | Executable | PE (Portable Executable) | Vidar Stealer | Go Loader (Factory-v3) | T1027 | T1055 | PE File Layout | Win 32 Exe | x86

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	f1ce9e4aae6692fb034cdcc5ad29966b
Sha1	3553b53210c1ef1d4db5a166abab53422c22b206
Sha256	660c6866e4451f641f8e0a48362dc5bbb8cc35af5fc01d85be99ec1f70f81e87
Sha384	c7a194afecfe9125930d5fca4084ac616d1a1c07ebcb1183ac77b41078afcd1fbbb2b421a8b1796c05266dc62220d8f7
Sha512	eae7238856fdff60b1b69aa195ea783e94215cdd55cc7ec1906dfdb16bf5c714b5bbb1b8c0f163012dec283f7fcf6745c8bf7109b0fcc01a2fa8f29294266b7f
SSDeep	98304:gGsqTIVri2C3jGdD4/LoJr4i3HVd7EqO/:FTx3jUDsErTeqO/
TLSH	5AC65C11FACB54F6F9036831416BB27F23315D048B28DB9BEB583B6BF877691186A305

PeID

HQR data fileMicrosoft Visual C++ v6.0 DLLPeStubOEP v1.xPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:exe~T1027~T1055

Shape pe:exe

malicious 1 nodes

Name	Value
Info	PE Detect: PeReader OK (file layout)