Malicious
PE Executable
MD5: 09a58d0deeb9b02610215b1cf96dd61c
Size: 12.57 MB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
File
Size
12.57 MB · 12,570,910 B
Hashes
MD5
09a58d0deeb9b02610215b1cf96dd61c
Sha1
9635d97d3001cba7520aede1b2a34717ad383786
Sha256
605aae2d9f1e499f2183b2412baf7748a3c69d5659740bc34914af02b6ae26af
Sha384
9df4efdeed648bb64ff3d7fbe7662b414ca9e75662cabe04839121cfdd7abc23f97399e5fcf7a8d0cdc46927d46b29fa
Sha512
000ea6630aecb84b510c6d686b9a61db25e0061cd9dc5aea04e8733707c2902c6ba56cb98567e7e731af18cfb2178f6d9b83169fd2782b683e3604c89969e2ce
SSDeep
98304:tjhOBNrzuaCerzFi6bszT1JX4pG2IfZE+s:yBkKr5rszpNDy+s
TLSH
26C65B11FACB54F6F9036831406BB27F23355D058B28CB9BEB183B6AF877691187A705
Detection
PeID
HQR data fileMicrosoft Visual C++ v6.0 DLLPeStubOEP v1.xPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!
1 malicious · 2 files
EXE09a58d0deeb9b02610215b1cf96dd61cT1027 · T1055Go Loader (Factory-v3)
Structure
BINOverlay_052ef0cb.bin
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:exe~T1027~T1055>bin
Shape
pe:exe>bin
malicious
2 nodes
| Name | Value |
|---|---|
| Attribution | |
| GoLoader | GoLoader extraction: NotIdentified |
| Info | PE Detect: PeReader OK (file layout) |
| Info | Overlay extracted: Overlay_052ef0cb.bin (286 bytes) |