Deep Malware Analysis of cae17fb04a253ab654f5e9669b09b01a | md5: cae17fb04a253ab654f5e9669b09b01a | Go Loader (Factory-v3) | Stealer Loader | T1027 | T1055 | Executable | PE (Portable Executable) | PE File Layout | Win 64 Exe | x64

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	cae17fb04a253ab654f5e9669b09b01a
Sha1	cb4026a244cf56a5d264c33e8c7afe135dee1db7
Sha256	be3bc809131c283b8deb542e11ed0878468b8db531696fdbee03978fde55be0e
Sha384	b53b378ce880eda88fce1bf8e3088b28d617f5edd9cc3316af4da3a5fd2cda06229049523ab4f0eda45f258a0f13f1a2
Sha512	c147c89974d0e5a33665af5b0460729bad2a5f558daebee737b06555b3db0d4ebaade2275daefdae5055ee9a0d9f231c7d1c914febccf47553277fccccff6386
SSDeep	49152:vGMo+14BRkguMvHk0dLf7DVsLzI7Mt7EqBrUsSIG+g7uCySxUPTsOF0FCZh8QJuX:vmzD9eM/7KSx+TwCvB8NGkC6w/E
TLSH	E9B63A47E8A544F9C19AD670C5369122BB317C888B3127D72F60FB292F76BD0AE79740

PeID

HQR data fileMicrosoft Visual C++ v6.0 DLLPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:exe~T1027~T1055

Shape pe:exe

malicious 1 nodes

Name	Value
Attribution	`Loader Go Factory-v3 : le stealer livré (Vidar, Lumma ou RemusStealer selon le build) est mappé en mémoire et n'est pas attribuable statiquement.`
Info	PE Detect: PeReader OK (file layout)