Malicious
PE Executable
MD5: be319b4ff3d09bb9d6bed1048a71b8ab
Size: 12.57 MB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan
This sample is a 12 MB PE Executable identified by Malva.RE as Go Loader (Factory-v3) (stealer loader). Static analysis extracted 1 embedded or derived file. It matches 2 YARA rules. Observed behaviours map to MITRE ATT&CK T1027 and T1055. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 46c910a00c3b7959e44b2a1768dbb3f1a9049d2a7c2deb903964250c86cf9360
- MD5
- be319b4ff3d09bb9d6bed1048a71b8ab
- Verdict
- Malicious
- File type
- PE Executable · 12 MB
- Family
- Go Loader (Factory-v3)
- Category
- Stealer Loader
Cite this report: https://app.malva.re/sha256/46c910a00c3b7959e44b2a1768dbb3f1a9049d2a7c2deb903964250c86cf9360
Related Go Loader (Factory-v3) samples
- 42526f70537038c889c8a2bfab15caac259d21f166b96aeae386714eaacbd4fa 2026-10-27
- ba08982115288519da734ac8403b71b656b028b6a560512d074101ddd83c6316 2026-10-27
- 81be28d204925ba3ef9c4df928ec2c7bd51cbab8376af87273c8d32648605e8a 2026-10-27
- f1f46738953c18bac8378a5aac3b44d5d2e6bfdc64982e1ada5986b8b4cc7b87 2026-10-27
- d14a12424f3e8879c7caac13ebf1d3db9fb316e1cb9be14e19f28619958e9488 2026-10-27
- c2850845e100b9b5614cada296347a7e93fae2b663e4147d6d2735977c3c7c98 2026-10-27
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Portable Executable file
Size
12.57 MB · 12,570,814 B
First seen
2026-10-27 10:30 · 48 minutes ago
Last seen
2026-10-27 10:30 · 48 minutes ago
Last analysis
2026-10-27 10:30 · 48 minutes ago
Hashes
MD5
be319b4ff3d09bb9d6bed1048a71b8ab
Sha1
90be2c85aced182463008306225b05cdf2249089
Sha256
46c910a00c3b7959e44b2a1768dbb3f1a9049d2a7c2deb903964250c86cf9360
Sha384
0bb22b72695f95d2709fd24aad220e2687ec2d623db49bee0342b859821fdb2b43eca0538621c60e2cac9d8bf312c250
Sha512
1454963b1bc566fd4462863d1110697a0d370a5b90965872456d86d1033de5854da9f436cbd6024475f6c9394bc43272ac25d2e7984e0b72c34db3e94f458a1e
SSDeep
98304:tjhOBNrzuaCerzFi6bszT1JX4pG2IfZE+p:yBkKr5rszpNDy+p
TLSH
6DC65B11FACB54F6F9036831406BB27F23355D058B28CB9BEB183B6AF877691187A705
1 malicious · 2 files
EXEbe319b4ff3d09bb9d6bed1048a71b8abT1027 · T1055Go Loader (Factory-v3)
Structure
BINOverlay_4a5fb5c8.bin
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:exe~T1027~T1055>bin
Shape
pe:exe>bin
malicious
2 nodes
| Name | Value |
|---|---|
| Attribution | |
| Info | Overlay extracted: Overlay_4a5fb5c8.bin (190 bytes) |