Deep Malware Analysis of c227808674d85a01e4a547b65c8a33f2 | md5: c227808674d85a01e4a547b65c8a33f2 | Executable | PE (Portable Executable) | Go Loader (Factory-v3) | Stealer Loader | T1027 | T1055 | PE File Layout | Win 32 Exe | x86

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	c227808674d85a01e4a547b65c8a33f2
Sha1	581464761b1b0a4af620f9be5c192c66592c0936
Sha256	98ca99f667bfb5032069d275246fa7f7fb67ef91e5508987995e40483df78c30
Sha384	ee0582102feccc0ffa238cd99e01d635ab2d68e57b1732f77a9dfc07398111065141684b76e32433323497a1b26db526
Sha512	b36bf35729d0679b5b2650677d8c05042de6c78175baea07f9c0239c1b493b4f9d94d436fd54ffc0d817125f68d21363807403c5e18bf49c2a5bbcfe3bec9052
SSDeep	98304:JJtQfO03IbL8invwOYWb3H32jfJV1c4tG20CwEdf:V0qdvpYWb2jfPyHol
TLSH	08C66B11FACB58F1E903583140ABB27F63315D048B38DBDBEB143B6AF87B6A11966705

PeID

HQR data fileMicrosoft Visual C++ v6.0 DLLPeStubOEP v1.xPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:exe~T1027~T1055

Shape pe:exe

malicious 1 nodes

Name	Value
Attribution	`Loader Go Factory-v3 : le stealer livré (Vidar, Lumma ou RemusStealer selon le build) est mappé en mémoire et n'est pas attribuable statiquement.`
Info	PE Detect: PeReader OK (file layout)