Malicious
Malicious

229199674a1d5b6f098bddeab7b0a87d

Share on LinkedIn
Print
PE Executable
MD5: 229199674a1d5b6f098bddeab7b0a87d
Size: 12.57 MB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan

This sample is a 12 MB PE Executable identified by Malva.RE as Go Loader (Factory-v3) (stealer loader). It matches 2 YARA rules. Observed behaviours map to MITRE ATT&CK T1027 and T1055. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
58cafffe8b371b4e89eea07bfe2100bce7f77df31dfb2b9cc2ea08612b09d7c4
MD5
229199674a1d5b6f098bddeab7b0a87d
Verdict
Malicious
File type
PE Executable · 12 MB
Family
Go Loader (Factory-v3)
Category
Stealer Loader
MITRE ATT&CK
T1027T1055

Cite this report: https://app.malva.re/sha256/58cafffe8b371b4e89eea07bfe2100bce7f77df31dfb2b9cc2ea08612b09d7c4

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
Portable Executable file
Size
12.57 MB · 12,570,817 B
First seen
2026-10-26 04:03 · 4 days ago
Last seen
2026-10-26 04:03 · 4 days ago
Last analysis
2026-10-26 04:04 · 4 days ago
Hashes
MD5 229199674a1d5b6f098bddeab7b0a87d Sha1 c2994fffb65a5e028504a3c4ccaf9a95c14b5713 Sha256 58cafffe8b371b4e89eea07bfe2100bce7f77df31dfb2b9cc2ea08612b09d7c4 Sha384 c591bf4202bbbb1e12344a92591a99aee25854bdc2ce7ba4097e7f0835e974255c97cc00294f4d4b51735f3b99c9627c Sha512 651fb06c476daaac29827c30dbaa9193544aefda195fd56931d6e3cffe3a9dd8f5ae9744f1dcda7e11068af63878bca9931f3b0219ed46ade41008575fa4db67 SSDeep 98304:tjhOBNrzuaCerzFi6bszT1JX4pG2IfZE+B:yBkKr5rszpNDy+B TLSH 36C65B11FACB54F6F9036831406BB27F23355D058B28CB9BEB183B6AF877691187A705

1 malicious · 1 file
EXE229199674a1d5b6f098bddeab7b0a87dGo Loader (Factory-v3)
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path pe:exe~T1027~T1055
Shape pe:exe
malicious 1 nodes

Name Value
Attribution 
Loader Go Factory-v3 : le stealer livré (Vidar, Lumma ou RemusStealer selon le build) est mappé en mémoire et n'est pas attribuable statiquement.

An error has occurred. This application may no longer respond until reloaded. Reload 🗙