Deep Malware Analysis of 07a006c2fcbe72be8a5bf12acccfca1c | md5: 07a006c2fcbe72be8a5bf12acccfca1c | Go Loader (Factory-v3) | Stealer Loader | T1027 | T1055 | Executable | PE (Portable Executable) | PE File Layout | Win 64 Exe | x64

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	07a006c2fcbe72be8a5bf12acccfca1c
Sha1	8ec6dd9c6cc22ebceeed3669a25e27a44a005c1b
Sha256	e472cd7cb92d7e00bc46eef47b0a06e194329c8ef52acb7a7749b86d661cc054
Sha384	bc19ceb6397f8e9e9e60f20170eda1fea28a13430a69f550ce9c5a3f8e84e2dd71295463e51b9a3c43296664b5ae1fef
Sha512	33b46c2cadc2fdc16d7c598eb9c67d1a4af49a4b25eb6f78beb490a1eda21c7a35df29488ca10f47a303301431d03d1be423c672e68bfcc3e816202d845ce6ee
SSDeep	49152:d48qZ0SD1+NOUETYq2vk9jU0oFyC0btrqQO2idFqxL/rF0nmQ1JoHwV8yupU:dwiM1+QK0bG2gFqJ/rGV7
TLSH	96368D137EA58569C0A9EB7588B362017674BC4D8B3133E71F91BB782E717C18AB9F04

PeID

HQR data fileMicrosoft Visual C++ v6.0 DLLPe123 v2006.4.4-4.12Private EXE Protector V2.30-V2.3X -> SetiSoft TeamtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:exe~T1027~T1055>bin

Shape pe:exe>bin

malicious 2 nodes

Name	Value
Attribution	`Loader Go Factory-v3 : le stealer livré (Vidar, Lumma ou RemusStealer selon le build) est mappé en mémoire et n'est pas attribuable statiquement.`
Info	PE Detect: PeReader OK (file layout)
Info	Authenticode present at 0x4E5E00 size 8144 bytes