General
- Target 2026-05-03_5c7cba2d63ec2787db23cdf3523c2f57_adposhel_darkgate_elex_glassworm_luca-stealer_mespinoza_njrat
- Size 10.2MB
- Sample260503-vb5ssshs6k
- SHA256 899b657f89736bdc66d29ee88357a6ee638fc34d5fc98227b28709b7d5a7fbf1
- MD5 5c7cba2d63ec2787db23cdf3523c2f57
- SHA1 95eec7bd8457d11376a21210378af12839811053
- SHA512 8927c28b29fe181cb2d2e0102363d62f22b5ff368b2c6adcb63b4e7e05ba18dfaeee5e2a902ccbe06927865f2800012026e11b9abebaac2e59a9eee09501050a
- SSDEEP 196608:dxvb84DyvoNSCJ7iyQnK7hJb6N7UBsLcByZceTovTDsTouol54cZ64X/+1cYQpSw:PDfSO7iyQY6N7UBsLcByZceTovTDsTGr
- TLSH T136B672C463A2F845E3A400B2100976D4664329313B15CADABEE357DA2A6D5C9BDF1F3F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-03_5c7cba2d63ec2787db23cdf3523c2f57_adposhel_darkgate_elex_glassworm_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260130-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-03_5c7cba2d63ec2787db23cdf3523c2f57_adposhel_darkgate_elex_glassworm_luca-stealer_mespinoza_njrat.exe
Resource
win11-20260130-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-03_5c7cba2d63ec2787db23cdf3523c2f57_adposhel_darkgate_elex_glassworm_luca-stealer_mespinoza_njrat
- Size 10.2MB
- SHA256 899b657f89736bdc66d29ee88357a6ee638fc34d5fc98227b28709b7d5a7fbf1
- MD5 5c7cba2d63ec2787db23cdf3523c2f57
- SHA1 95eec7bd8457d11376a21210378af12839811053
- SHA512 8927c28b29fe181cb2d2e0102363d62f22b5ff368b2c6adcb63b4e7e05ba18dfaeee5e2a902ccbe06927865f2800012026e11b9abebaac2e59a9eee09501050a
- SSDEEP 196608:dxvb84DyvoNSCJ7iyQnK7hJb6N7UBsLcByZceTovTDsTouol54cZ64X/+1cYQpSw:PDfSO7iyQY6N7UBsLcByZceTovTDsTGr
- TLSH T136B672C463A2F845E3A400B2100976D4664329313B15CADABEE357DA2A6D5C9BDF1F3F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.