Deep Malware Analysis of 02434c436cdaa2153f1f62205b883e79 | md5: 02434c436cdaa2153f1f62205b883e79 | Go Loader (Factory-v3) | Stealer Loader | T1027 | T1055 | Executable | PE (Portable Executable) | PE File Layout | Win 64 Exe | x64

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	02434c436cdaa2153f1f62205b883e79
Sha1	a1e279cbe1725a91744687ead3fa7df9b9001de4
Sha256	62cf3226cf293b464eb9d01ea63b62a6b3a3635f17fc30cea77c78f36b1def87
Sha384	5edd4d1ef63f43c8166ba5a6031265e182d62156c98ed59538de78ec951559c8bdb2c1c8b8760919088c1eb524227160
Sha512	de76e696cac70f06d38e8995d87ab6bed27212702e5dc12a6d850697f40d8fa1c8f037bfa099d735e4826f7cd3b56c337a32ff6f981c1a4c73f5f905cf1faf06
SSDeep	49152:NheY4akheNZNsCD/woykUE4LCN8qyEOsFsYrCiopQUOY:NhS3YoX/dbFlYrCnKUOY
TLSH	96068C17FEA01C7AC0D9533288B69242773DBC451B3637E72A90B3BA3E366D06936754

PeID

HQR data fileMicrosoft Visual C++ v6.0 DLL

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:dll~T1027~T1055>bin

Shape pe:dll>bin

malicious 2 nodes

Name	Value
Attribution	`Loader Go Factory-v3 : le stealer livré (Vidar, Lumma ou RemusStealer selon le build) est mappé en mémoire et n'est pas attribuable statiquement.`
Info	PE Detect: PeReader OK (file layout)
Info	Authenticode present at 0x3BE658 size 2408 bytes