Malicious
PE Executable
MD5: 17f8c39ac1f7921a922e98124f8f262c
Size: 12.57 MB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
File
Size
12.57 MB · 12,570,801 B
Hashes
MD5
17f8c39ac1f7921a922e98124f8f262c
Sha1
8fbe33848afc89dba3a1dcb6e359932af4c54a88
Sha256
22a1fb5cdafc00b1b2d3a5d7d2bb65d2c9b4ef8cd959335051811cd32dd21160
Sha384
0eeba9ded862c842d9d756b05187d497cf0573faadbe05f843fec9dc9ca751386eeae9b305ddee90e24265b7f4d8ef66
Sha512
70381608d2a1fc3552443190aa0ec0b2344ccd6441c212c924e51aa599a453c63902fb71524134a729ac83279145ed51ed6a334712fa89d33a88d98044d097a1
SSDeep
98304:tjhOBNrzuaCerzFi6bszT1JX4pG2IfZE+w:yBkKr5rszpNDy+w
TLSH
50C65B11FACB54F6F9036831406BB27F23355D058B28CB9BEB183B6AF877691187A705
Detection
PeID
HQR data fileMicrosoft Visual C++ v6.0 DLLPeStubOEP v1.xPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!
1 malicious · 2 files
EXE17f8c39ac1f7921a922e98124f8f262cT1027 · T1055Go Loader (Factory-v3)
Structure
BINOverlay_ef46f7b1.bin
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:exe~T1027~T1055>bin
Shape
pe:exe>bin
malicious
2 nodes
| Name | Value |
|---|---|
| Attribution | |
| Info | PE Detect: PeReader OK (file layout) |
| Info | Overlay extracted: Overlay_ef46f7b1.bin (177 bytes) |
| GoLoader | GoLoader extraction: NotIdentified |