This sample is a 12 MB PE Executable identified by Malva.RE as Go Loader (Factory-v3) (stealer loader). Static analysis extracted 1 embedded or derived file. It matches 2 YARA rules. Observed behaviours map to MITRE ATT&CK T1027 and T1055. Static analysis cannot prove a file is harmless: an unknown or heavily packed threat can go undetected. The file was parsed and decompiled, never executed.
- SHA256
- 96f2358bf2ab505efdd6554deebef23dc992e24a057c2bfc6a4a3eaaad826ad6
- MD5
- e2e88f918d3ba4281129007c9a5a3c1a
- Verdict
- No known threat found
- File type
- PE Executable · 12 MB
- Family
- Go Loader (Factory-v3)
- Category
- Stealer Loader
Cite this report: https://app.malva.re/sha256/96f2358bf2ab505efdd6554deebef23dc992e24a057c2bfc6a4a3eaaad826ad6
Related Go Loader (Factory-v3) samples
- ad9a979e68a411ca15f5d003c37ada725d02c34d6c1b7f34c4dbbbed39a8dd4f 2026-11-02
- 0da518a8446bf832d527a9859d96753b6740f9ae1991e0ca72c928f3fc46dec7 2026-11-02
- cb2e73ac6ae49335bf6263c8a8a99ca5abfa6a8a8cdd4d6d29e6ebd78271fa83 2026-11-02
- 8fe7d9550b62b75da6fb8f2c1a3289f355991650252b8ed1be19ca88fb697935 2026-11-02
- 04f5fb7c6ca948f1d0af5791d2b11aa7630c3b5159c94b1ecf68859cf2d91c47 2026-11-02
- 54e791eba46a6655cdc58b8dc7813d27d5fcf94a1bc10468e0334f6cb7f3d32f 2026-11-02
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
pe:exe~T1027~T1055>bin
pe:exe>bin
| Name | Value |
|---|---|
| Attribution | |
| Info | Overlay extracted: Overlay_fb84e140.bin (204 bytes) |