Deep Malware Analysis of aaed2188e812f09f714d49a19c590eec | md5: aaed2188e812f09f714d49a19c590eec | Executable | PE (Portable Executable) | PE File Layout | Win 64 Exe | x64 | Go Loader (Factory-v3) | Stealer Loader | T1027 | T1055

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	aaed2188e812f09f714d49a19c590eec
Sha1	4daad771fa7bf85fdadb0e40d0af5e06c6759434
Sha256	95b5c650d9a1d3276cc3a3f7e3ee6f110fafef59015174e665349ba5c6a3368b
Sha384	095828747a39b108b3853962b03f12a81b88fc93467f159019cac74a81ba50711ffb28b4bf29214b3d5bdb28cfdf2eca
Sha512	87e168ffe4f2d2b55ac3512f3ba18351c5f377d5e9dbbd49d2f76e18f2fbd51f7ba73e33fa6fddd3c3ae5562d27a72ae405f1d6ea384e3850cc7fb8cfe18b556
SSDeep	49152:+Xp5VX9H5QqBhQ9FTPFO9j03LZrtKpATR4mnQyxQ1KKYwLwlmyKz:+bJZ56rFUj0trnvKKKqYpz
TLSH	81168C176D5185BAC0AAA335857B92437A35BC4C4B3133D72FA4BB3C2EB27D19A79304

PeID

HQR data fileMicrosoft Visual C++ v6.0 DLLPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:exe~T1027~T1055>bin

Shape pe:exe>bin

malicious 2 nodes

Name	Value
Info	PE Detect: PeReader OK (file layout)
Info	Authenticode present at 0x401400 size 8064 bytes
Attribution	`Loader Go Factory-v3 : le stealer livré (Vidar, Lumma ou RemusStealer selon le build) est mappé en mémoire et n'est pas attribuable statiquement.`