Deep Malware Analysis of fe64471c8633d67764e49a797608bc2a | md5: fe64471c8633d67764e49a797608bc2a | Vidar Stealer | Go Loader (Factory-v3) | T1027 | T1055 | Executable | PE (Portable Executable) | PE File Layout | Win 32 Exe | x86

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	fe64471c8633d67764e49a797608bc2a
Sha1	46d7be8b891e098ed87a8699b3fe5c71f958259b
Sha256	8eec9f6fdb0c7cb01c7e881a42181b72d70eea5da59f8ed765a04420775b00b6
Sha384	9e85cc78a6ead43083115d19001e8e6ceddb1dec0d831ebb7fdefe8c8f24f7bf05ebbb41def40fbdf380aa0fc9d119b2
Sha512	f2aab8e5482b7c364e068f62e263519db127f1022c59f42ef5f74390365b03c314ec51907c7e19d556fd7e93470f14556c6f06c3d2ad5fced6573df3c9f473e9
SSDeep	98304:xmsk1Yo7rqCvS5uNFqEaU24S3HVd7EYO/:c17TS4NsM2TeYO/
TLSH	20C65C11FACB54F6F9036831416BB27F23315D048B28DB9BEB583B6BF877691186A305

PeID

HQR data fileMicrosoft Visual C++ v6.0 DLLPeStubOEP v1.xPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:exe~T1027~T1055

Shape pe:exe

malicious 1 nodes

Name	Value
Info	PE Detect: PeReader OK (file layout)