Deep Malware Analysis of ee3196a6eef869b3314c117b85ea4201 | md5: ee3196a6eef869b3314c117b85ea4201 | Executable | PE (Portable Executable) | Go Loader (Factory-v3) | Stealer Loader | T1027 | T1055 | PE File Layout | Win 64 Exe | x64

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	ee3196a6eef869b3314c117b85ea4201
Sha1	4822681cf9eb5826c5c1d20df0dd2163e88d67f9
Sha256	e0b224363b0fac2b9a2ff32f397e1b03feb33b987e8cb85bbfdca2678c7973b1
Sha384	874993e55933fc050e8b7fe00c662a259d80c32f57f773836075267decaa2e5c97c0dc9ba41fd5bc762d01b66cf1fc97
Sha512	334974fcd37a5aeb9a7fab5c57ca24dbad8453c979126aa993a1f995e3a723df256a5ecec3b4524b31106b4c7afd5e7592d120ee289a943d413a0655edf9e148
SSDeep	49152:4iDY/SWowNj6l7eTu3WnlqiVs3cmCNpArsG9Ipb3B:4iiHfqGnIIsHCNpCsG63
TLSH	88F5AE0BBE905E78C4DAD73255AA01557A28BC188B383BE71F90B6392F713D18E76F41

PeID

HQR data fileMicrosoft Visual C++ v6.0 DLL

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:dll~T1027~T1055

Shape pe:dll

malicious 1 nodes

Name	Value
Attribution	`Loader Go Factory-v3 : le stealer livré (Vidar, Lumma ou RemusStealer selon le build) est mappé en mémoire et n'est pas attribuable statiquement.`
Info	PE Detect: PeReader OK (file layout)