Go Loader (Factory-v3) malware analysis – f9b12ae35695

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

File

Type

Portable Executable file

Size

9.41 MB · 9,408,000 B

First seen

2026-09-29 07:15 · 26 days ago

Last seen

2026-09-29 07:15 · 26 days ago

Last analysis

2026-10-23 19:32 · 2 days ago

Hashes

MD5 42e6fcf19b02c1483de6e90f1d4f67c5 Sha1 abc9a6a442288a1c7e7e688358ebab6d2f828980 Sha256 f9b12ae35695159a523ac9c2067f6e816ea2468602c4b87bd1568637ede40200 Sha384 233d5baa41937c663f7ae017fe529c1ab7a03b1f9c46d79f2fc2be03dc4467cbfc9015fb45782dfe8b62c5866c134a49 Sha512 6b8759d772a6baba33dde087a6af9a5835e64c6fa9ecb25ea475428ddc5bc0659a3d4afbf8d485ed7f9920d8dd997b5e502c225aceaefd2a33c3a5ead74dda6e SSDeep 98304:Y9z6/3zVzY/9WH+ouxUdvqYbiEEm49cS/OJ/S0l0G1ezoPXdP2iD25s:Y92z6WeoZdCz9UXlH0G1/P2Ug TLSH 3A967C03ECA119E9C1A9E23189B79252BB717C481B3223D72BA0F3396F767D06E75750

Detection

PeID

HQR data fileMicrosoft Visual C++ v6.0 DLLPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!

1 malicious · 1 file

EXE42e6fcf19b02c1483de6e90f1d4f67c5Go Loader (Factory-v3)

Structure

BIN(folder)

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:exe~T1027~T1055

Shape pe:exe

malicious 1 nodes

Name	Value
Attribution	`Loader Go Factory-v3 : le stealer livré (Vidar, Lumma ou RemusStealer selon le build) est mappé en mémoire et n'est pas attribuable statiquement.`