Malicious
PE Executable
MD5: 13f9160ef4135f1acd7cdc3f882da557
Size: 12.57 MB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
File
Size
12.57 MB · 12,570,112 B
Hashes
MD5
13f9160ef4135f1acd7cdc3f882da557
Sha1
aea1f639953437af5babab00c0b07d368231be1a
Sha256
000043e54a1e76b09d109363e5677ac88896df0363c90063f1174ac5bcf7aa8c
Sha384
30a64e85b7400d4d72144caced6dfa927ccdf72ab39957e8cd809eacd9fe1076997dcc03d51ce4553f958a67e9871897
Sha512
599d08f4cb0de89a94128ae6e7340a6dd179fa09a054e002f087607370b66f7b61d38d105e3ecac432eab39f3cd3e935428c0ad5007259089917cca241e0b598
SSDeep
98304:4GsqTIVri2C3jGdD4/Lokr4i3HVd7EqO/:9Tx3jUDsBrTeqO/
TLSH
8DC65C11FACB54F6F9036831416BB27F23315D048B28DB9BEB583B6BF877691186A305
Detection
PeID
HQR data fileMicrosoft Visual C++ v6.0 DLLPeStubOEP v1.xPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!
1 malicious · 1 file
EXE13f9160ef4135f1acd7cdc3f882da557T1027 · T1055Go Loader (Factory-v3)
Structure
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:exe~T1027~T1055
Shape
pe:exe
malicious
1 nodes
| Name | Value |
|---|---|
| Attribution | |
| GoLoader | GoLoader extraction: NotIdentified |
| Info | PE Detect: PeReader OK (file layout) |