Go Loader (Factory-v3) malware analysis – 60458b413968

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

File

Size

12.57 MB · 12,570,845 B

First seen

2026-10-25 20:00 · 3 hours ago

Last seen

2026-10-25 20:00 · 3 hours ago

Last analysis

2026-10-25 20:00 · 3 hours ago

Hashes

MD5 2953711000e5a796f75324a4b098969f Sha1 789fe0827297f7e67eca9a65e4d174755886406a Sha256 60458b413968640bee146326da9c15113de5a0bc5b7cf114b0505e82f8e9468a Sha384 e5c02fffd1d4d8febe332cb443eec1c8e4b3f28054e36660a0dde6e649d74e326f994d7770a0445e9c57522ecc879ae5 Sha512 3b6a74c825d9c8bda9b575f196fc9e5fda6421f90bcb17cfb411f0961e7595ff227f5bab2196a222d896d45e19074fc4f82450a363db9b9c6d2a98dd709e8a20 SSDeep 98304:tjhOBNrzuaCerzFi6bszT1JX4pG2IfZE+m:yBkKr5rszpNDy+m TLSH 15C65B11FACB54F6F9036831406BB27F23355D058B28CB9BEB183B6AF877691187A705

1 malicious · 2 files

EXE2953711000e5a796f75324a4b098969fGo Loader (Factory-v3)

Structure

BINOverlay_c7259cef.bin

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:exe~T1027~T1055>bin

Shape pe:exe>bin

malicious 2 nodes

Name	Value
Attribution	`Loader Go Factory-v3 : le stealer livré (Vidar, Lumma ou RemusStealer selon le build) est mappé en mémoire et n'est pas attribuable statiquement.`
Info	Overlay extracted: Overlay_c7259cef.bin (221 bytes)