Deep Malware Analysis of 53e0e708be189f9f6665005c24632c6e | md5: 53e0e708be189f9f6665005c24632c6e | Go Loader (Factory-v3) | Stealer Loader | T1027 | T1055 | Executable | PE (Portable Executable) | PE File Layout | Win 64 Exe | x64

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	53e0e708be189f9f6665005c24632c6e
Sha1	40e544dde9ed4cdc4e863b5856b6f38a6a1ccc04
Sha256	b06272cfcdb2a23afb84accb683bb0ab6cc14d537954d2811723b8872ccf38ba
Sha384	e1b35fa2017a412310c0e863c678ef51945295b2ad247d86ce9c1461ce31185fee8e028239df47f4f9a4e8dc8a64d806
Sha512	3ae1594137ab8f439b93efa9bd25ca9a1ee8dbed8c2ee21b0badca93d0f1811afc151f18ca6c7f8395c660e6ed309ded9d0a3d15e9eab375590bd0cf0b0e10ad
SSDeep	24576:o4N/KlpTo6+a5uDWLgYfdK2PVXAPpxL7GcpG8U3QDfym+wLYIh3CKyDW2c:oiilpk+7gYfdTXAPL6lhwLxdyDpc
TLSH	28F54B03BD94D5A4D09AA638C97F5263A6357C48CB3173E32E90AA382FB73C19DB4754

PeID

HQR data fileMicrosoft Visual C++ v6.0 DLLtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:exe~T1027~T1055

Shape pe:exe

malicious 1 nodes

Name	Value
Attribution	`Loader Go Factory-v3 : le stealer livré (Vidar, Lumma ou RemusStealer selon le build) est mappé en mémoire et n'est pas attribuable statiquement.`
Info	PE Detect: PeReader OK (file layout)