Deep Malware Analysis of a1abe03182a68ee490165b23720c5259 | md5: a1abe03182a68ee490165b23720c5259 | Executable | PE (Portable Executable) | Go Loader (Factory-v3) | Stealer Loader | T1027 | T1055 | PE File Layout | Win 32 Exe | x86

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	a1abe03182a68ee490165b23720c5259
Sha1	2c3a7750607dc6f68132eb271c793686f9cc5c7f
Sha256	4aa1807186f4189823a10f82e55305dba8c80cd64debccc808dc3f28ac4dd6c5
Sha384	7d7a66178d6324d1fea844161e3620405f5fe0d2d753f32dfa463755ca5a9d7c7165e7e9a6f80ab9287d2f524fe48de2
Sha512	979cd4f1ef3b4519100f01e9c058030d470f7085d4e3f9338c2d4941b7a3308430a6754a73e7f4b3c5e3d1f5ccc8818961fea87669bee6c29b910c9050a5b1dd
SSDeep	196608:W5pPhw3Sg/RORM1S7gwC8hIBilFjH5yN0l:M7gERZgwC8hVDDl
TLSH	6D76DF01FDC754F6E903163154A7A2AF37246D014F38DBDBEA447A6EE9B72E20C36246

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:exe~T1027~T1055>pe:rsrc>bin

Shape pe:exe>pe:rsrc>bin

malicious 3 nodes

Path pe:exe~T1027~T1055>bin

Shape pe:exe>bin

malicious 2 nodes

Name	Value
Attribution	`Loader Go Factory-v3 : le stealer livré (Vidar, Lumma ou RemusStealer selon le build) est mappé en mémoire et n'est pas attribuable statiquement.`
Info	PE Detect: PeReader OK (file layout)
Info	Authenticode present at 0x700E00 size 16824 bytes