This sample is a 12 MB PE Executable identified by Malva.RE as Go Loader (Factory-v3) (stealer loader). Static analysis extracted 1 embedded or derived file. It matches 2 YARA rules. Observed behaviours map to MITRE ATT&CK T1027 and T1055. Static analysis cannot prove a file is harmless: an unknown or heavily packed threat can go undetected. The file was parsed and decompiled, never executed.
- SHA256
- 7c5cbc6d87d7fe6d4897b082de994d03230eb344f8996744bb63bea8e062082a
- MD5
- fd3fb36eddf541ca3826418d7fd94d22
- Verdict
- No known threat found
- File type
- PE Executable · 12 MB
- Family
- Go Loader (Factory-v3)
- Category
- Stealer Loader
Cite this report: https://app.malva.re/sha256/7c5cbc6d87d7fe6d4897b082de994d03230eb344f8996744bb63bea8e062082a
Related Go Loader (Factory-v3) samples
- ad9a979e68a411ca15f5d003c37ada725d02c34d6c1b7f34c4dbbbed39a8dd4f 2026-11-02
- 0da518a8446bf832d527a9859d96753b6740f9ae1991e0ca72c928f3fc46dec7 2026-11-02
- cb2e73ac6ae49335bf6263c8a8a99ca5abfa6a8a8cdd4d6d29e6ebd78271fa83 2026-11-02
- 8fe7d9550b62b75da6fb8f2c1a3289f355991650252b8ed1be19ca88fb697935 2026-11-02
- 04f5fb7c6ca948f1d0af5791d2b11aa7630c3b5159c94b1ecf68859cf2d91c47 2026-11-02
- 54e791eba46a6655cdc58b8dc7813d27d5fcf94a1bc10468e0334f6cb7f3d32f 2026-11-02
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
pe:exe~T1027~T1055>bin
pe:exe>bin
| Name | Value |
|---|---|
| Attribution | |
| Info | Overlay extracted: Overlay_d24df689.bin (192 bytes) |