Go Loader (Factory-v3) malware analysis – fbe2645a48c7

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

File

Size

6 MB · 5,997,568 B

First seen

2026-10-07 16:45 · 18 days ago

Last seen

2026-10-07 16:45 · 18 days ago

Last analysis

2026-10-23 19:28 · 2 days ago

Hashes

MD5 37d0a372e985411759656cf1402a4639 Sha1 bb9f682009b5cce00dd43135061f945fea7abe87 Sha256 fbe2645a48c7f453b9c892982e31bf40b5bd236d930c434e4f8892245dfa01c0 Sha384 c03a3f24fbacda22b555e9cf323e987fef6c9326394f348247ac5c3f88307214863d50906577fe5a2cc97e8f32563e29 Sha512 d43a2ef9a435a548a03dcfbeb141315d67cb78bf499e183ac60b84f2862416152099355df0290c77c47fd7e150a14b1643bb9dfda5d3956d79dbcd8b0f3c7d65 SSDeep 49152:1MicRpeSuvWNh3gwEaHlKNFHN1hxTNH7kld0hLG+cSB5+aSwKeK9KYhpmH5ET:1ol+2EDhfbkj0kZLfL8E TLSH 81565C07ECA515E5C0EAE6308A629153BB71BC486B3527D32B90F7786F77BD06A78310

Detection

PeID

HQR data fileMicrosoft Visual C++ v6.0 DLLPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!

1 malicious · 1 file

EXE37d0a372e985411759656cf1402a4639Go Loader (Factory-v3)

Structure

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:exe~T1027~T1055

Shape pe:exe

malicious 1 nodes

Name	Value
Attribution	`Loader Go Factory-v3 : le stealer livré (Vidar, Lumma ou RemusStealer selon le build) est mappé en mémoire et n'est pas attribuable statiquement.`