Deep Malware Analysis of a0a144b9b679b41a96f36b875952c286 | md5: a0a144b9b679b41a96f36b875952c286 | Executable | PE (Portable Executable) | Go Loader (Factory-v3) | Stealer Loader | T1027 | T1055 | PE File Layout | Win 64 Exe | x64

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	a0a144b9b679b41a96f36b875952c286
Sha1	a47435b91a7678066f1b69aa424bee1eebc7f9cf
Sha256	9abbe771a1ea4a09c7dbc7c28d2a1103c45720b08a119f62517c835376f3ef65
Sha384	23f6c3d26db65e156a3d1b0741d70671b46174d465b05308de4edba823cf41fe8439b849844632b4ed6731b795440c6d
Sha512	65ee8ec48fd4e5a625927368199b03f2baee676ed1d5a1b4025d0b4cd15dce1e2cf6b198eebb3087ce57edbdd7017cf91a9637b4a74d0c64859c0b7ea5e45406
SSDeep	98304:YPTg4IXPev3vUztvy5BlsphkvQpboFnBm:YPM4yPpqOTT0ns
TLSH	09468D073B9055A9D096EB35C0A7021177B0BC4CCB3673EB6EA26A382F267C65E75F05

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:exe~T1027~T1055>bin

Shape pe:exe>bin

malicious 2 nodes

Name	Value
Attribution	`Loader Go Factory-v3 : le stealer livré (Vidar, Lumma ou RemusStealer selon le build) est mappé en mémoire et n'est pas attribuable statiquement.`
Info	PE Detect: PeReader OK (file layout)
Info	Authenticode present at 0x53EA00 size 8048 bytes