Deep Malware Analysis of 00a5710a52bfd6c14890e9e3eaa43400 | md5: 00a5710a52bfd6c14890e9e3eaa43400 | Executable | PE (Portable Executable) | PE File Layout | Go Loader (Factory-v3) | Stealer Loader | T1027 | Win 64 Exe | x64 | T1055

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	00a5710a52bfd6c14890e9e3eaa43400
Sha1	454beeec7c69e0b03ea1945c9dd6467336affbdf
Sha256	2f5320f353759ed22643f7ad12713d76a998b41cf4dedad82ff38a015eab138e
Sha384	681c4b86281e12095eda7e556320d182835090786a80b75c9eec10432ff0d8835c3a499b6a9a47941020a16a05988ebc
Sha512	cabd0dde7462be5aabb9150fe633a88351f9a375aea40aa6079757263f5675bb0304e275d629d867c5935947d60a9fe998a0617ff5fad05ba33f77714687bb01
SSDeep	24576:MeXRxlILCbeRmd4sd2VVVEMds+Ljoys/+uPApTnX1qegyHmw4vMsmmL7cy:MAjlILUeodLrMds+fgfw4B
TLSH	73F55A137AE040E4E447E635C47652A3AA3AFC4CD77163D72E617A742E723D1BAB8B04

PeID

HQR data fileMicrosoft Visual C++ v6.0 DLLPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:exe~T1027~T1055>bin

Shape pe:exe>bin

malicious 2 nodes

Name	Value
Info	PE Detect: PeReader OK (file layout)
Info	Authenticode present at 0x377600 size 8072 bytes
Attribution	`Loader Go Factory-v3 : le stealer livré (Vidar, Lumma ou RemusStealer selon le build) est mappé en mémoire et n'est pas attribuable statiquement.`