Malicious
PE Executable
MD5: 8608111a696552639d43786e54a1b11d
Size: 12.57 MB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
File
Size
12.57 MB · 12,570,782 B
Hashes
MD5
8608111a696552639d43786e54a1b11d
Sha1
23aaeb6bf7f4b10b89731b6ed93cc6c26a039e04
Sha256
4fce2a5d9ba8e95349c421083190430383249980fe9a4ee9ef22e8037ffd0188
Sha384
24d8c32edcad501123aad3004ab9589afc731d09f5c3ffd652604718bf52fd352aae49c88199e856dd73fdc1e00abb4b
Sha512
cb900718eb5595cd82ce0139c6e7e8bdf394a23908900ea50b1ea6d770134b3f2e71db70cad013f24e7a470233932e1d0697d0995b63089f45cbdca4f7048fbd
SSDeep
98304:tjhOBNrzuaCerzFi6bszT1JX4pG2IfZE+f:yBkKr5rszpNDy+f
TLSH
A5C65B11FACB54F6F9036831406BB27F23355D058B28CB9BEB183B6AF877691187A705
Detection
PeID
HQR data fileMicrosoft Visual C++ v6.0 DLLPeStubOEP v1.xPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!
1 malicious · 2 files
EXE8608111a696552639d43786e54a1b11dT1027 · T1055Go Loader (Factory-v3)
Structure
BINOverlay_a5c2020d.bin
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:exe~T1027~T1055>bin
Shape
pe:exe>bin
malicious
2 nodes
| Name | Value |
|---|---|
| Attribution | |
| GoLoader | GoLoader extraction: NotIdentified |
| Info | PE Detect: PeReader OK (file layout) |
| Info | Overlay extracted: Overlay_a5c2020d.bin (158 bytes) |