Malicious
Malicious

57a6c26035af2c3c60a0a0b533d1f280

Share on LinkedIn
Print
PE Executable
MD5: 57a6c26035af2c3c60a0a0b533d1f280
Size: 12.57 MB
application/x-dosexec

This sample is a 12 MB PE Executable identified by Malva.RE as Go Loader (Factory-v3) (stealer loader). It matches 2 YARA rules. Observed behaviours map to MITRE ATT&CK T1027 and T1055. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
079b45c4e8697b39d50229d6013b31ecf01e5fc83684f99d688e2d5a3c5a2c9b
MD5
57a6c26035af2c3c60a0a0b533d1f280
Verdict
Malicious
File type
PE Executable · 12 MB
Family
Go Loader (Factory-v3)
Category
Stealer Loader
MITRE ATT&CK
T1027T1055

Cite this report: https://app.malva.re/sha256/079b45c4e8697b39d50229d6013b31ecf01e5fc83684f99d688e2d5a3c5a2c9b

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Size
12.57 MB · 12,570,933 B
First seen
2026-10-26 00:16 · 39 minutes ago
Last seen
2026-10-26 00:16 · 39 minutes ago
Last analysis
2026-10-26 00:16 · 38 minutes ago
Hashes
MD5 57a6c26035af2c3c60a0a0b533d1f280 Sha1 7873cee98bcc805ec13e2de522d7f3332420c450 Sha256 079b45c4e8697b39d50229d6013b31ecf01e5fc83684f99d688e2d5a3c5a2c9b Sha384 5ff900e515cfa43fb3f7fc1bbd0ae723e663abf8194ab3568c6c779ee77ad3df1d30b361ef38cf612feba25171d7dd87 Sha512 ca833d55a98320317ebadb40122f896e6551f6c53970a2949a9f2a9570469526d0e7fa30ff60b8463be4eee84fb9515bccaa8405497a89ad9955cc44514e4c35 SSDeep 98304:tjhOBNrzuaCerzFi6bszT1JX4pG2IfZE+i:yBkKr5rszpNDy+i TLSH A1C65B11FACB54F6F9036831406BB27F23355D058B28CB9BEB183B6AF877691187A705

1 malicious · 1 file
EXE57a6c26035af2c3c60a0a0b533d1f280Go Loader (Factory-v3)
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path pe:exe~T1027~T1055
Shape pe:exe
malicious 1 nodes

Name Value
Attribution 
Loader Go Factory-v3 : le stealer livré (Vidar, Lumma ou RemusStealer selon le build) est mappé en mémoire et n'est pas attribuable statiquement.

An error has occurred. This application may no longer respond until reloaded. Reload 🗙