Deep Malware Analysis of 4bc0990a5d982fa515ebc9d2bd386ae1 | md5: 4bc0990a5d982fa515ebc9d2bd386ae1 | Executable | PE (Portable Executable) | PE File Layout | Win 64 Exe | x64 | Go Loader (Factory-v3) | Stealer Loader | T1027 | T1055

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	4bc0990a5d982fa515ebc9d2bd386ae1
Sha1	0c4cf2825782a8c2ea21d47a4b4f3da62f001d35
Sha256	d7b13c95de115a4c28879eac721766ec612e97c28d91c9e53b7dca50d6ab19d2
Sha384	e2af041b70f302963507cb846e4beb79ee1dfda9d21554a67788db905ebe273543154c068ac0904fee7714bc728247a5
Sha512	c04a2d90f029bb1cc65d266db9499e401b6b3770409d982eeab80b0d43fabb9c7c29085d053b623c39fd60830ffec54fd13b71edf6e337dddbdd1e0766ad53c9
SSDeep	49152:jqYV9qgoYmpm+EZ7WvkVV56+Y/jA5EbOAJREus/yyB2w:j0pmThj56ME3auql
TLSH	AB464A47FC9545E9C0AED63586629263BA32BC485B3023D72F50F7382F76BD0AA79740

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:exe~T1027~T1055

Shape pe:exe

malicious 1 nodes

Name	Value
Info	PE Detect: PeReader OK (file layout)
Attribution	`Loader Go Factory-v3 : le stealer livré (Vidar, Lumma ou RemusStealer selon le build) est mappé en mémoire et n'est pas attribuable statiquement.`