Deep Malware Analysis of 1e3a5c631d107cb9155c4479cbc8e8ba | md5: 1e3a5c631d107cb9155c4479cbc8e8ba | Executable | PE (Portable Executable) | Go Loader (Factory-v3) | Stealer Loader | T1027 | T1055 | PE File Layout | Win 64 Exe | x64

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	1e3a5c631d107cb9155c4479cbc8e8ba
Sha1	66c6ce3685402717178afb0d3ef49ccf08586d9f
Sha256	4d8e529fbbc44a09026d9e4665bde06a187ea54aad9e2d58aabbeaab084a3e37
Sha384	088e66cc73a8f01d4630689ad867928982e5fc0eaee0a9a6848bf186002918274761fa9e8008ae207806450a9b17441c
Sha512	6ecb9dc529b85dc7eb61f1431cdfad472a73584f33f95efe79b5861a417a5a267b96d0a0cd8aff3caac41d71d786f636f40ce430e58f6ac78154090a543969d6
SSDeep	49152:/phI5QIrZRDmGfABFac3OFffvIswKDCzAqgTzBxtwpn7+Dqw0xljzr:/0fIrBFaBtfFLDe3R5
TLSH	D3161907BB915468C0DAE635C5E6426177BAFC4C873723D76EA0A6B42F323D19A39F04

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:exe~T1027~T1055>bin

Shape pe:exe>bin

malicious 2 nodes

Name	Value
Attribution	`Loader Go Factory-v3 : le stealer livré (Vidar, Lumma ou RemusStealer selon le build) est mappé en mémoire et n'est pas attribuable statiquement.`
Info	PE Detect: PeReader OK (file layout)
Info	Authenticode present at 0x430E00 size 8048 bytes