Deep Malware Analysis of 3ef7e66908fb3d89e3307cb82732d90d | md5: 3ef7e66908fb3d89e3307cb82732d90d | Executable | PE (Portable Executable) | Go Loader (Factory-v3) | Stealer Loader | T1027 | T1055 | PE File Layout | Win 64 Exe | x64

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	3ef7e66908fb3d89e3307cb82732d90d
Sha1	1dc7b48855bf03c0ae6bfba0fad0b7958def01a2
Sha256	4feb0b3c0fc8a7347395d85cc11d57e8f2d585ccfd0836e65525a83e244cc883
Sha384	4cdba383636a91deba2ce75347005a9405c42e1c18b051d81aad98eb310a3fdb8f91b2e6c1414020ae22bb353333f30d
Sha512	c9aa52c848cb070f6ef89df51155817e8c6e165b409a0bfdf9baf9da5c58aff7d60153796b46d6c9cf96ee32e0a8d0f3754cc26d921f63841bb03fbe049c2b1d
SSDeep	196608:PEVQ9fbsGDfsP9JEARGnTDvRD3qqNhE0nmLg:PVs0fRARGnTDvRD3qqNhE0nmL
TLSH	36C62A87E86544EAC1AAD534C6369223BF717C889B2137D72B50FB242F76BD06E79700

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:exe~T1027~T1055>pe:rsrc>bin

Shape pe:exe>pe:rsrc>bin

malicious 3 nodes

Name	Value
Attribution	`Loader Go Factory-v3 : le stealer livré (Vidar, Lumma ou RemusStealer selon le build) est mappé en mémoire et n'est pas attribuable statiquement.`
Info	PE Detect: PeReader OK (file layout)