Malicious
Malicious

adc56caf0a4f563b16c134cfd5f3b3d4

Share on LinkedIn
Print
PE Executable
MD5: adc56caf0a4f563b16c134cfd5f3b3d4
Size: 12.57 MB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
File
Type
Portable Executable file
Size
12.57 MB · 12,572,160 B
First seen
2026-10-19 04:45 · 6 days ago
Last seen
2026-10-19 04:45 · 6 days ago
Last analysis
2026-10-23 19:14 · 2 days ago
Hashes
MD5 adc56caf0a4f563b16c134cfd5f3b3d4 Sha1 ebcf5e9dc403d2c7bf5f16078078ca3845d3eca1 Sha256 e9c0c38dc0128214ac58ded574ab2628c4fa1cd7c2101552b34b72641ac3583e Sha384 14d80c36bbf006bee71a09eca2fdcc73c6b17ee07661f2fbfb0aac1c66e33eb534d8d0d085b106b130032d40e7c676d2 Sha512 2dfe7f9e736c2e8063e94815ccc1e628d8b1b4b7f1caad31418e650a4174f851256d6351005f8f88d9eabb34ef415eff81d010502e935d6ace40892579609d63 SSDeep 98304:pcnIiZ6JHtwUXioDuvleDwVCw9Tz4fG2IfSEpY:m68UBD2dVCwTzx3pY TLSH 69C66C11FACB54F5E9035831506BB27F23315D048B28CBDBEB183B6AF87B6A1197A705
Detection
PeID
HQR data fileMicrosoft Visual C++ v6.0 DLLPeStubOEP v1.xPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!
1 malicious · 1 file
EXEadc56caf0a4f563b16c134cfd5f3b3d4Go Loader (Factory-v3)
Structure
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path pe:exe~T1027~T1055
Shape pe:exe
malicious 1 nodes
Name Value
Attribution
Loader Go Factory-v3 : le stealer livré (Vidar, Lumma ou RemusStealer selon le build) est mappé en mémoire et n'est pas attribuable statiquement.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙