Go Loader (Factory-v3) malware analysis – 60133c5c6dfc

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

File

Size

8.35 MB · 8,346,112 B

First seen

2026-10-08 08:45 · 17 days ago

Last seen

2026-10-08 08:45 · 17 days ago

Last analysis

2026-10-23 19:28 · 2 days ago

Hashes

MD5 50ff1200f80e014b7feb007cef758e0f Sha1 98eac8bbceddad796b665d208c74e96a66c214d5 Sha256 60133c5c6dfc050c08e39902dfe91404f70e6fd048934c3b9e68d748d6aba9ad Sha384 ce7298400b908431f8ae4ad3037148a77ac62308714915d34560dbfa240d8f1e49a5d07dc99790bf89adf7dfebe4efd1 Sha512 d97680a77920ecba736a363bba745b0de25efcb996df2016c25caa7c036796445e4bb269a6a5cd907c9b3675aff5361911e396e2db1e15cf0061207a0e53b13a SSDeep 98304:V3T2h9PPeJzgg3ty1qOMGUjEBoSMeduU8gsHZVY/YK2:VjigJMg3E1qrQFM/U8gsHCYX TLSH 22867C43EC9159E9C1A9A33089A79253BB71BC481B3223D72B90F7392F76BD06E75350

Detection

PeID

HQR data fileMicrosoft Visual C++ v6.0 DLLPe123 v2006.4.4-4.12Private EXE Protector V2.30-V2.3X -> SetiSoft TeamtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!

1 malicious · 1 file

EXE50ff1200f80e014b7feb007cef758e0fGo Loader (Factory-v3)

Structure

BIN(folder)

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:exe~T1027~T1055

Shape pe:exe

malicious 1 nodes

Name	Value
Attribution	`Loader Go Factory-v3 : le stealer livré (Vidar, Lumma ou RemusStealer selon le build) est mappé en mémoire et n'est pas attribuable statiquement.`