Malicious
PE Executable
MD5: e8def6f183ba324032a0f0ef06be0f6d
Size: 12.57 MB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
File
Type
Portable Executable file
Size
12.57 MB · 12,570,793 B
Hashes
MD5
e8def6f183ba324032a0f0ef06be0f6d
Sha1
92a5b2df6e497a8d5c4d8f17157834ab597d435e
Sha256
15ad5ded80d667fde36461bc9a4d30301c1257af539346e43a5303d2d456d2d3
Sha384
47bb2e5237a9e9a812d7c3e652e3a2474358c1c2920a102e39386c361e1919a441abd69732dd966c52eadf4ce52202ab
Sha512
e6162d1f592aa7420504a0f4cad2feb32948f67222d31de28997f857a47959c6a7494af2eb0bb31f001a0da1a7eed4fbf22f9b486f3dbf26798c12d4ff75b459
SSDeep
98304:tjhOBNrzuaCerzFi6bszT1JX4pG2IfZE+K:yBkKr5rszpNDy+K
TLSH
0FC65B11FACB54F6F9036831406BB27F23355D058B28CB9BEB183B6AF877691187A705
Detection
PeID
HQR data fileMicrosoft Visual C++ v6.0 DLLPeStubOEP v1.xPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!
1 malicious · 2 files
EXEe8def6f183ba324032a0f0ef06be0f6dT1027 · T1055Go Loader (Factory-v3)
Structure
BINOverlay_84cf2322.bin
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:exe~T1027~T1055>bin
Shape
pe:exe>bin
malicious
2 nodes
| Name | Value |
|---|---|
| Attribution | |
| Info | PE Detect: PeReader OK (file layout) |
| Info | Overlay extracted: Overlay_84cf2322.bin (169 bytes) |
| GoLoader | GoLoader extraction: NotIdentified |