Go Loader (Factory-v3) malware analysis – 680a01fc7667

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

File

Size

12.57 MB · 12,570,112 B

First seen

2026-10-08 08:00 · 17 days ago

Last seen

2026-10-08 08:00 · 17 days ago

Last analysis

2026-10-23 19:29 · 2 days ago

Hashes

MD5 88bd93c3462c1e219d6b64af47ab22fc Sha1 c3103ab2f313ab8c70d4f0ac3beaf67e51e2f849 Sha256 680a01fc7667fe9589137b855256e60e391700f4063dd887d165a86d72c8c9ef Sha384 1952880196618aa6b4fd9c2b6de9ca4239af4bcd3dddfff9da713f1011aad38ff661e11682fa8042899147fb7a5f67db Sha512 f846900f433dbc23bfda533878e068429afdee8c061067ee711e0186bb267caca170109595d91d3c7130688187d7c970abbd89ab9a9034aab4e8e06aca601c3b SSDeep 98304:3eFlfCDbx+CmPSXQ1rlvLf4S3HVd7EyO/:cfeOP6Q55fTeyO/ TLSH A9C65C11FACB54F6F9036831416BB27F23315D048B28DB9BEB583B6BF877691186A305

Detection

PeID

HQR data fileMicrosoft Visual C++ v6.0 DLLPeStubOEP v1.xPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!

1 malicious · 1 file

EXE88bd93c3462c1e219d6b64af47ab22fcGo Loader (Factory-v3)

Structure

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:exe~T1027~T1055

Shape pe:exe

malicious 1 nodes

Name	Value
Attribution	`Loader Go Factory-v3 : le stealer livré (Vidar, Lumma ou RemusStealer selon le build) est mappé en mémoire et n'est pas attribuable statiquement.`