Deep Malware Analysis of 3e37afb25cf59842460fb2d62e6c0918 | md5: 3e37afb25cf59842460fb2d62e6c0918 | Executable | PE (Portable Executable) | Go Loader (Factory-v3) | Stealer Loader | T1027 | T1055 | PE File Layout | Win 64 Exe | x64

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	3e37afb25cf59842460fb2d62e6c0918
Sha1	aeef9edb69e7e82ca5bacb4553d4d856af3427db
Sha256	5ab3e835eef27d5927c72320af184d1e49125dcaf61f7188bb4ae67758da909a
Sha384	a772595977411df9732c5ca99d6ccdfbab3fa8e5bf16b1386b9d2bbc43ae52be99a95faf9d71e73a668a1009261799d3
Sha512	a59855827a10c97ead33a319b2cbfc0f017481c6020f53848962f7c115d9e7f1ebb68f715cc9851d5f679c0ceade180f20f72ee4ea695f1026dc3525ed3cd857
SSDeep	49152:N/lhTJIo5w244aQkmMlmtXFAmeJ6B8loh/wJvGJvU2miSBFp5eHHZGw9LTjxnE8+:Nt3VaRlmtXFJ8a2ZT44T6zjxq
TLSH	32F57C07AF9149AEC056533288A2BA92373CBC050B3657C77E9076762F327C1AD77B58

PeID

HQR data fileMicrosoft Visual C++ v6.0 DLL

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:dll~T1027~T1055>bin

Shape pe:dll>bin

malicious 2 nodes

Name	Value
Attribution	`Loader Go Factory-v3 : le stealer livré (Vidar, Lumma ou RemusStealer selon le build) est mappé en mémoire et n'est pas attribuable statiquement.`
Info	PE Detect: PeReader OK (file layout)
Info	Authenticode present at 0x337590 size 2416 bytes