Deep Malware Analysis of daeac6bade684e55155ca454af844c38 | md5: daeac6bade684e55155ca454af844c38 | Go Loader (Factory-v3) | Stealer Loader | T1027 | T1055 | Executable | PE (Portable Executable) | PE File Layout | Win 64 Exe | x64

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	daeac6bade684e55155ca454af844c38
Sha1	dd61770caa9147f95004542dbe558c4e2124a252
Sha256	300c08087c2bca4f04e0786ffe2e46b44d2e36124cc21253e0ca9273cb8fbb90
Sha384	15d9dc021a0b95d2078351a8d05957956b9a7275b4785a86f9b1652128da9f2c684726c92c8f84594410d4500b37f42b
Sha512	3c1b909a61e8d1be03fa1dfb9d4e93454c92d1e451653f3124882cb66c2ab1a63e4c911dc8b8a620a2234a780c24716287d8f3015cc6f0704ebebfe87907ef25
SSDeep	24576:/SONp3pfcoOcySvaxvwzMW1317dmxyu9FjVvEuGm2cIW+Yhv7airMUPD0L3+Uego:/S43lDjzShMQ8uPjVst0bMirpI7wrn9
TLSH	7AE54A06BF8085A9C0A6DB32C8771112B774BC4CCB3123DB2E95A6742EBA7D65E71F14

PeID

HQR data fileMicrosoft Visual C++ v6.0 DLLPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:exe~T1027~T1055>bin

Shape pe:exe>bin

malicious 2 nodes

Name	Value
Attribution	`Loader Go Factory-v3 : le stealer livré (Vidar, Lumma ou RemusStealer selon le build) est mappé en mémoire et n'est pas attribuable statiquement.`
Info	PE Detect: PeReader OK (file layout)
Info	Authenticode present at 0x2F5200 size 8056 bytes