Deep Malware Analysis of fc22fe9d485486c805a39fccca0a37f5 | md5: fc22fe9d485486c805a39fccca0a37f5 | Vidar | Go Loader (Factory-v3) | T1027 | T1055 | Executable | PE (Portable Executable) | PE File Layout | Win 64 Exe | x64

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	fc22fe9d485486c805a39fccca0a37f5
Sha1	82a2d4cce26ffc87d7295600f776f606a11b8c54
Sha256	689be07e9d436d4e8c70781f71dc1f74ddbf5cb440e80b16c4caa0ed434b6165
Sha384	79f255a2abde91aeea2c67d30ca71ccfc5031c4f2b8e6cb4110ad4d4f877c4a0c3eea6956af929e490f975b46fa80776
Sha512	aee172839e73b2e96647a0370adcfeb67a95eb6efd0af6f9080ce123d292de325e84e7107872278acaa1066df02b494f2142bc7f968dc7c5a7a22d3f36428192
SSDeep	49152:x9osCi0R09S12Z0QCP7MrD+IfAMK3D9Y579ZwOADUiB8X3j2fhNyQAOPlb9WaLv6:xBmIr4OMOAjan6fDHPlbVLcCfa9
TLSH	15668D036A4541E5D854DE30C2BE5762BA74F88DDB3533E72E806BB52F357D0AABA700

PeID

HQR data fileMicrosoft Visual C++ v6.0 DLLPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:exe~T1027~T1055>bin

Shape pe:exe>bin

malicious 2 nodes

Name	Value
Info	PE Detect: PeReader OK (file layout)
Info	Authenticode present at 0x671600 size 8064 bytes