Malicious
PE Executable
MD5: f74a0fbddac01f282b070fc6b57811a6
Size: 1.75 MB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan
This sample is a 1.7 MB PE Executable identified by Malva.RE as Vidar Stealer (stealer). It matches 2 YARA rules. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 925a9d35a32e1a6a1ce1ae4b9ff09e289184d4d925d700752c99f15ab04296dd
- MD5
- f74a0fbddac01f282b070fc6b57811a6
- Verdict
- Malicious
- File type
- PE Executable · 1.7 MB
- Family
- Vidar Stealer
- Category
- Stealer
Cite this report: https://app.malva.re/sha256/925a9d35a32e1a6a1ce1ae4b9ff09e289184d4d925d700752c99f15ab04296dd
Related Vidar Stealer samples
- 6d68d0a96c8bc726cbe3bf6f6253fb0ccae50627e966b8606f3582ef65eacec7 2026-11-01
- c96f81d0ddbc29f0315c4b0809d97e280051a016b6a6852e5bd88e1a6ec235bc 2026-10-29
- f0f686989d043a10a7f5ee442fc97877ac52b9baf16b4cdca1191dd9631efc4c 2026-10-29
- d515d3eeb16636e316345494bf98a312b59bb7f5c226faa6c64ca2e6980f3185 2026-10-28
- 9758f758b221d0ab47e831ce9ec8dee2e8d9fbb58d3c91b0ce056fa1f6fa0cfd 2026-10-28
- 830fdb947aa60a491d22c8f698e9531fdd651f76cecafd3350d408442db4c59e 2026-10-28
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Size
1.75 MB · 1,748,480 B
Hashes
MD5
f74a0fbddac01f282b070fc6b57811a6
Sha1
6a60d7fb542c4a603f982e8a6f0d6269188b2899
Sha256
925a9d35a32e1a6a1ce1ae4b9ff09e289184d4d925d700752c99f15ab04296dd
Sha384
0247cf8dc6c2671b6adcdbb67fa46a4c9ed89aa14f9e349f8ddf7c568228fc418ac30a1703eaf8b0d13dd48c38d85d48
Sha512
01be1c41e8aac03ac846346d5230cdcfe6dbb174ab6a38858f83aaa1caf277397efd55db0d5321e6ca2b41dceca9d06a7a17e49c586582e771b429dc713b1ca7
SSDeep
24576:MRCHWdzPchRf8DQeR74F66JhyjtRzxDt+GSpnZ/0BtTODJzEvQMNgx:VkxKYODpil
TLSH
E585E547EBB651E4D8FAC1398666722BBC71385983349BD797408A474B62FF0E93E340
Detection
PeID
MASM/TASM - sig4 (h)Microsoft Visual C++ 8.0Microsoft Visual C++ 8.0 (DLL)Microsoft Visual C++ v6.0 DLLPe123 v2006.4.4-4.12
1 malicious · 1 file
EXEf74a0fbddac01f282b070fc6b57811a6Vidar Stealer
Structure
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:exe
Shape
pe:exe
1 nodes