Malicious
PE Executable
MD5: e4d9f03e6ed5705a3c76085003708672
Size: 12.57 MB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
File
Size
12.57 MB · 12,570,779 B
Hashes
MD5
e4d9f03e6ed5705a3c76085003708672
Sha1
53da7d738c6ac27c3896c92e61cb950c44fbb92e
Sha256
188e8261855740338dcfd6bfbcbbb3380658276fc733300829087eab66818696
Sha384
79f7eb42c9c8955ce81a3b27f71a2a89b5abfe3ceba85c9e36ebafa291d6fee1da3a2c6a0ad4e0f5cc22f377636d403b
Sha512
c4f77c0bef0354c1ff58430b10c49808019af73bceff35ee171787524cd79611856ed7405d2b3e721427998a0be2fae466414ff5cafbe525e122a5b22acb3089
SSDeep
98304:tjhOBNrzuaCerzFi6bszT1JX4pG2IfZE+Q:yBkKr5rszpNDy+Q
TLSH
70C65B11FACB54F6F9036831406BB27F23355D058B28CB9BEB183B6AF877691187A705
Detection
PeID
HQR data fileMicrosoft Visual C++ v6.0 DLLPeStubOEP v1.xPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!
1 malicious · 2 files
EXEe4d9f03e6ed5705a3c76085003708672T1027 · T1055Go Loader (Factory-v3)
Structure
BINOverlay_25371476.bin
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:exe~T1027~T1055>bin
Shape
pe:exe>bin
malicious
2 nodes
| Name | Value |
|---|---|
| Attribution | |
| GoLoader | GoLoader extraction: NotIdentified |
| Info | PE Detect: PeReader OK (file layout) |
| Info | Overlay extracted: Overlay_25371476.bin (155 bytes) |