MB-cb2e73ac6ae49335bf6263c8a8a99ca5abfa6a8a8cdd4d6d29e6ebd78271fa83
high
📛 Threat Title
Unknown: gitl__it_64-v.6.117.exe
Description
File type: exe. Size: 6062968 bytes. Tags: exe, signed, Stealer, Vidar, VidarStealer. Reporter: AmadeyHunter. First seen: 2026-11-02 23:02:24.
Indicators of Compromise (4)
Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.
hash_imphash
d42595b695fc008ef2c56aabd8efd68e
IOC database
- Type
- hash_imphash
- Value
d42595b695fc008ef2c56aabd8efd68e- First seen
- Last seen
- Attached to this threat
- Appears in
- 891 threats
- Description
- imphash of URLhaus payload a7b9f3dda435b7f2…
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
hash_sha256
cb2e73ac6ae49335bf6263c8a8a99ca5abfa6a8a8cdd4d6d29e6ebd78271fa83
IOC database
- Type
- hash_sha256
- Value
cb2e73ac6ae49335bf6263c8a8a99ca5abfa6a8a8cdd4d6d29e6ebd78271fa83- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
- Description
- Unknown
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
hash_sha1
924c363ca059ffc81b16f36137c4eff490c4316b
IOC database
- Type
- hash_sha1
- Value
924c363ca059ffc81b16f36137c4eff490c4316b- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
hash_md5
5d8b74619a3783762626664894e3ea04
IOC database
- Type
- hash_md5
- Value
5d8b74619a3783762626664894e3ea04- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
References (1)
-
MalwareBazaar sample page
Abuse.ch
File type: exe. Size: 6062968 bytes. Tags: exe, signed, Stealer, Vidar, VidarStealer. Reporter: AmadeyHunter. First seen: 2026-11-02 23:02:24.
Remediations (10)
-
web:docs.gitlab.com
The Remediation section of the vulnerability page shows a solution provided by the security scanning tool that reported the security finding, or entered during the manual creation of a vulnerability. The GitLab tools utilize information from the GitLab advisory database.
-
web:git-scm.com
Click here to download the latest (2.56.0 (4)) x64 version of Git for Windows. This is the most recent maintained build. It was released 8 days ago, on 2026-10-26. Other Git for Windows downloads Standalone Installer Git for Windows/x64 Setup. Git for Windows/ARM64 Setup. Portable ("thumbdrive edition") Git for Windows/x64 Portable. Git for Windows/ARM64 Portable. Using winget tool Install ...
-
web:github.com
Intune Remediation package for the CVE-2026-45585 YellowKey BitLocker/WinRE bypass mitigation described in the provided procedure. This package removes autofstx.exe from the offline WinRE image's BootExecute value and refreshes WinRE registration so BitLocker trust is reestablished.
-
web:github.com
Windows-Malware-Effects- Remediation -Tool An open-source tool that makes recovering from malware effects MUCH easier.
-
web:learn.microsoft.com
Proved the fix. Microsoft stated that they have re-published the CVE-2013-3900 to inform customers about the availability of EnableCertPaddingCheck. This behavior remains available as an opt-in feature via the registry key setting and is available on all supported editions of Windows released since December 10, 2013. <P> Microsoft recommends that executable authors consider conforming all ...
-
web:learn.microsoft.com
This table shows the script names, descriptions, detections, remediations , and configurable items. Script files whose names start with Detect are detection scripts. Remediation scripts start with Remediate. These scripts can be copied from the next section in this article.
-
web:malwaretips.com
This guide teaches you how to remove Unknown .exe virus for free by following easy step-by-step instructions.
-
web:www.dell.com
As the title states, the last entry I can find from Support team is a year old and Support Assist has changed. What is the new procedure other than remove Support Assist, trim the tree from m...
-
web:www.joesandbox.com
Multi AV Scanner detection for submitted file Source: gitl#U043e#U0441it#U044364-v.6.262.exe Virustotal: Detection: 9% Perma Link Joe Sandbox ML detected suspicious sample Source: Submited Sample Neural Call Log Analysis: 100.0%
-
web:www.joesandbox.com
Loading Joe Sandbox Report ... Play interactive tourEdit tour Windows Analysis Report gitl#U043e#U0441it#U044364-v.6.262.exe
AI Forensic Analysis
Only Available for Registered Users. Sign in to view.