Deep Malware Analysis of 23d02815c2d88958feb4b314ab3c1b9c | md5: 23d02815c2d88958feb4b314ab3c1b9c | Go Loader (Factory-v3) | Stealer Loader | T1027 | T1055 | Executable | PE (Portable Executable) | PE File Layout | Win 64 Exe | x64

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	23d02815c2d88958feb4b314ab3c1b9c
Sha1	dd0152236bf703e6c95cfc66c9d6a4d163abb67f
Sha256	1b95c2783b667ad5ffbd5b66afc367a92c314f507ba43789ec0bcda5a623a877
Sha384	af53cc623b1e3654fd053b9df0c0bf5fe67ce8ac83bdce53fd431b3650a57ae534a7b37318d7917e2aa21589628e6659
Sha512	dfd259e1f0d8ddc97490a325d820d088ae821d5d04d1f7e8c3964771cf88981fa87592bae57ae01f431f78eeefcc8a8c6d61271f6fd9364e1c28ff53a7f03d0d
SSDeep	49152:WpQhmm4RxlGxPdxZ0RW2/Og4wkhLZFjcTZzjg00w/8VTSmcnsknX3kXlhtfK7K9O:WeKxMAExc9d0yO+bnEzmqiYE
TLSH	2A564A03ECA549E9C0AAE23189769253BF717C885B3123D72B90F7292F76BD06E75350

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:exe~T1027~T1055

Shape pe:exe

malicious 1 nodes

Name	Value
Attribution	`Loader Go Factory-v3 : le stealer livré (Vidar, Lumma ou RemusStealer selon le build) est mappé en mémoire et n'est pas attribuable statiquement.`
Info	PE Detect: PeReader OK (file layout)