Deep Malware Analysis of a824398b7923e0945551b06f47c400ed | md5: a824398b7923e0945551b06f47c400ed | Executable | PE (Portable Executable) | Go Loader (Factory-v3) | Stealer Loader | T1027 | T1055 | PE File Layout | Win 64 Exe | x64

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	a824398b7923e0945551b06f47c400ed
Sha1	71e0a4750018bd6b367b18b16e8fea0bf1e96e15
Sha256	b94b0462a88c7f7f45e8ab7c4b4bdaeb54ac646a1720b89bdcaf580074a4a54a
Sha384	01921602d6c44a12662d4869d209b876be6eb2dfc9cbe64a68e971ce9a65fa1e225c6dba1507574b5a84e5b7f9b7b2e8
Sha512	5cda2d33f9c5cda0499bc3cdd8ea196e4cada6c708f9c18ecec7902ae98bd86e950b6ab468d62a8a700e5c6bc294e21c0ca902c6d31823a805d4a23d1ec5e12d
SSDeep	49152:FS+0EccQfLJMD9rvekmrasDquVNhdBjs7RuA+Nv52Zrn1T3K:FluesBVssRNvR
TLSH	DA067C07ECA118F9D0AAA23189769152BF317C481F3163DB3A50B7B82F76BD06DB9714

PeID

HQR data fileMicrosoft Visual C++ v6.0 DLLPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:exe~T1027~T1055>bin

Shape pe:exe>bin

malicious 2 nodes

Name	Value
Attribution	`Loader Go Factory-v3 : le stealer livré (Vidar, Lumma ou RemusStealer selon le build) est mappé en mémoire et n'est pas attribuable statiquement.`
Info	PE Detect: PeReader OK (file layout)
Info	Authenticode present at 0x3C7600 size 10512 bytes