Malicious
Malicious

58e058e5952cc7b1eef6ef15c6825394

Share on LinkedIn
Print
PE Executable
MD5: 58e058e5952cc7b1eef6ef15c6825394
Size: 12.57 MB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan

This sample is a 12 MB PE Executable identified by Malva.RE as Go Loader (Factory-v3) (stealer loader). It matches 2 YARA rules. Observed behaviours map to MITRE ATT&CK T1027 and T1055. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
5102c6aea1d4f788bce14dd58632d813e5edb19dd06f627d52a8637e7209114e
MD5
58e058e5952cc7b1eef6ef15c6825394
Verdict
Malicious
File type
PE Executable · 12 MB
Family
Go Loader (Factory-v3)
Category
Stealer Loader
MITRE ATT&CK
T1027T1055

Cite this report: https://app.malva.re/sha256/5102c6aea1d4f788bce14dd58632d813e5edb19dd06f627d52a8637e7209114e

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
Portable Executable file
Size
12.57 MB · 12,570,624 B
First seen
2026-10-28 03:30 · 17 minutes ago
Last seen
2026-10-28 03:30 · 17 minutes ago
Last analysis
2026-10-28 03:31 · 16 minutes ago
Hashes
MD5 58e058e5952cc7b1eef6ef15c6825394 Sha1 9375b41f73e95962d29ea308d500045e6c072e6b Sha256 5102c6aea1d4f788bce14dd58632d813e5edb19dd06f627d52a8637e7209114e Sha384 08e5b94c4aba06daf8e51a358746d93ddfd956c2d43d824e97355839e0fe07e246f04b6586b0c38a7c44f439fcae6f0e Sha512 d7e577c4f0670f4508a92c8919355f4f0e05996b1e38a065b90546f35b2b2fd55406498017b752a69a9fc9c9eb45d6bf35d43f05df49748ef502fed6265bd7b6 SSDeep 49152:ipXZKft05HtyvruRo9JBDRHCTdU391KX1NbNV4L6d+NTPeGFPbQuhHEPAw8sWA7B:6Z0tkRorxxCO3ukFJFzAoxU4aeEl TLSH 6CC65C11FACB54F6F9036831416BB37F23315D048B28DB9BEB583B6AF877691186A305

1 malicious · 1 file
EXE58e058e5952cc7b1eef6ef15c6825394Go Loader (Factory-v3)
Structure
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path pe:exe~T1027~T1055
Shape pe:exe
malicious 1 nodes

Name Value
Attribution 
Loader Go Factory-v3 : le stealer livré (Vidar, Lumma ou RemusStealer selon le build) est mappé en mémoire et n'est pas attribuable statiquement.

An error has occurred. This application may no longer respond until reloaded. Reload 🗙