Deep Malware Analysis of 87c5079595aba6a5510d84d4a6a2ad4e | md5: 87c5079595aba6a5510d84d4a6a2ad4e | Executable | PE (Portable Executable) | Go Loader (Factory-v3) | Stealer Loader | T1027 | T1055 | PE File Layout | Win 64 Exe | x64

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	87c5079595aba6a5510d84d4a6a2ad4e
Sha1	51544051c354b3f157cf2b2983ad7893c507c035
Sha256	b15dcba2635f3329822d030c98a6dd92d7e6a19941797257e7e6a583dfa54efc
Sha384	8c7fc1a9193d282e68be537f05d08a6ef3cc42d6935be8304cde72c644520e3c927acc4ac2a81e62be6393cd2d490fcb
Sha512	934fffdaf25fc0d58bd56cdee75370640b88f0c0b405b8fa0f9372ebe4a73fe9894c1f550af3869a72e108511164dd8f7057d6b6a923d32c1e03248ae2a311a3
SSDeep	49152:0YnrDMz0of7lxOvYzeXpLe/SmuG3Yq+KaqZA0cvSncxZpTcvurYyRfINQcIOJg1l:03KzB6Z2mcxritRBOleHz+nuoEq
TLSH	90B63B47E89544F5C1A9D63085369263BA71BC489B3137D72FA0FB682F73BD06AB9700

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:exe~T1027~T1055

Shape pe:exe

malicious 1 nodes

Name	Value
Attribution	`Loader Go Factory-v3 : le stealer livré (Vidar, Lumma ou RemusStealer selon le build) est mappé en mémoire et n'est pas attribuable statiquement.`
Info	PE Detect: PeReader OK (file layout)