Go Loader (Factory-v3) malware analysis – b4f328e74340

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

File

Size

12.57 MB · 12,570,867 B

First seen

2026-10-25 19:30 · 4 hours ago

Last seen

2026-10-25 19:30 · 4 hours ago

Last analysis

2026-10-25 19:30 · 4 hours ago

Hashes

MD5 9ad8545306f850ecea30130811d98470 Sha1 e3a472e5295ccedb455f263b58c365cb9e1f1b12 Sha256 b4f328e743406d1410d5d534d03d0fe3ac279b068e5e9929ec4392f958b68cd3 Sha384 27d7c720bab1097937573ec16a2b1e8153f08f0a5c3cb77edf8aba14c5d020d07f5cdb95e1cfcfe0124a06557fb7344a Sha512 37b1c7fb6d7f279bae41d732304c2f7e115da0ed88c082519a5df0d814cb4a38aaf4683106ce2a2a139245afe93a688cf5c7e0f4c9f4e029c8519f67a155ce4a SSDeep 98304:tjhOBNrzuaCerzFi6bszT1JX4pG2IfZE+C:yBkKr5rszpNDy+C TLSH E3C65B11FACB54F6F9036831406BB27F23355D058B28CB9BEB183B6AF877691187A705

1 malicious · 2 files

EXE9ad8545306f850ecea30130811d98470Go Loader (Factory-v3)

Structure

BINOverlay_5c8ecc69.bin

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:exe~T1027~T1055>bin

Shape pe:exe>bin

malicious 2 nodes

Name	Value
Attribution	`Loader Go Factory-v3 : le stealer livré (Vidar, Lumma ou RemusStealer selon le build) est mappé en mémoire et n'est pas attribuable statiquement.`
Info	Overlay extracted: Overlay_5c8ecc69.bin (243 bytes)