Malicious
PE Executable
MD5: a44b09d78e4e6dc952800197203744b6
Size: 12.57 MB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
File
Size
12.57 MB · 12,570,824 B
Hashes
MD5
a44b09d78e4e6dc952800197203744b6
Sha1
d6b4745eba53e6b4fcfe176b6e3b444b0f0258b0
Sha256
d1ecb7411b7d55b5e8016e0f0a9359bc39f85e33ce6a5ea7985863ccb2d152c8
Sha384
5fd15b3fd6f15385db9915248ce5acdde911d8ba87a46d0f9bd314f342b56fa1622b3afc93bf78a51cfa63445ed52e1c
Sha512
0532407cbceb42e9835b3bb1b5c275dd3ec9eab1c2335c7bc64a9159bdb84d10bb5142ec9c7c9a13c195e97e85c1a400f16cbb87b29075856b9414fa10a892bd
SSDeep
98304:tjhOBNrzuaCerzFi6bszT1JX4pG2IfZE+V:yBkKr5rszpNDy+V
TLSH
8AC65B11FACB54F6F9036831406BB27F23355D058B28CB9BEB183B6AF877691187A705
Detection
PeID
HQR data fileMicrosoft Visual C++ v6.0 DLLPeStubOEP v1.xPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!
1 malicious · 2 files
EXEa44b09d78e4e6dc952800197203744b6T1027 · T1055Go Loader (Factory-v3)
Structure
BINOverlay_6a9114fd.bin
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:exe~T1027~T1055>bin
Shape
pe:exe>bin
malicious
2 nodes
| Name | Value |
|---|---|
| Attribution | |
| GoLoader | GoLoader extraction: NotIdentified |
| Info | PE Detect: PeReader OK (file layout) |
| Info | Overlay extracted: Overlay_6a9114fd.bin (200 bytes) |