Go Loader (Factory-v3) malware analysis – d3d8c0efa4c2

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

File

Size

8.47 MB · 8,467,456 B

First seen

2026-10-08 06:30 · 17 days ago

Last seen

2026-10-08 06:30 · 17 days ago

Last analysis

2026-10-23 19:28 · 2 days ago

Hashes

MD5 4a0bc917ac65e39cf31425614d14372a Sha1 5d519a34a47dd45f7c7e3399ff9a83363efb1a5a Sha256 d3d8c0efa4c20e55e07a3266db9f8b433e65443496bd078bf333bf0d0c2a9d20 Sha384 2f5d51e732ad9f2390c3939557f892c30ec68c2e1d98e3a8aa61d11ebc4d17ee186b2b1d53b2dbcd09b07d6b4c92c115 Sha512 057b75a62049526c7c680d1e3de272897cf8f431330c7a8761f48de860f28a1c3fa26e77e76dd297a68440564a901f19d769f962a3ceec39a89d7c8e1934031a SSDeep 98304:yx6MuD6bRhucxm2CDwu1EFNGfj2UergLq6q7gKvgnSn8mo:yxO6Pucc0FNGf3egLq5754X TLSH 27868D03EC9159EAC1EAE23189729252BA717C446B3227D32B90F77D6F77BD06A74310

Detection

PeID

HQR data fileMicrosoft Visual C++ v6.0 DLLPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!

1 malicious · 1 file

EXE4a0bc917ac65e39cf31425614d14372aGo Loader (Factory-v3)

Structure

BIN(folder)

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:exe~T1027~T1055

Shape pe:exe

malicious 1 nodes

Name	Value
Attribution	`Loader Go Factory-v3 : le stealer livré (Vidar, Lumma ou RemusStealer selon le build) est mappé en mémoire et n'est pas attribuable statiquement.`