Malicious
PE Executable
MD5: ffc2dea7f228ac0a560e4d7e3ebcc0b3
Size: 12.57 MB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
File
Size
12.57 MB · 12,570,112 B
Hashes
MD5
ffc2dea7f228ac0a560e4d7e3ebcc0b3
Sha1
4e4795795d45e395881d3b71aa23161b54865824
Sha256
2e1e9f7a1058fab772f7285f283c9ac225f3207467a73c08f1026ae348bdd547
Sha384
c949a96097fd5000d0b21628fcfbecd905e2388bae5b5dcf34ad505ea1c28a55ff29f29457f683518a8acb543cc066ba
Sha512
2790b62f1e954fe93a723a15119a95d433a0bc4c8d8c03c585f9cb533b552c6a832237e5c12a3de277b1e12478a4b2230a4d06334a6897cd9c94f60ff36e1cf2
SSDeep
49152:CBiYLtcEUP6VAs2Sf9JRToDCMChlxFlxqyr/6vgJsdbkkVew3mp03eZROdwvfZOH:zYRcNSfrd4CXlTRMzSXvVT4CrEvO/
TLSH
86C65C11FACB54F6F9036831416BB27F23315D048B28DB9BEB583B6AF877691187A305
Detection
PeID
HQR data fileMicrosoft Visual C++ v6.0 DLLPeStubOEP v1.xPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!
1 malicious · 1 file
EXEffc2dea7f228ac0a560e4d7e3ebcc0b3T1027 · T1055Go Loader (Factory-v3)
Structure
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:exe~T1027~T1055
Shape
pe:exe
malicious
1 nodes
| Name | Value |
|---|---|
| Attribution | |
| GoLoader | GoLoader extraction: NotIdentified |
| Info | PE Detect: PeReader OK (file layout) |