Analysis
- max time kernel
149s - max time network
128s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
- submitted
04/05/2026, 17:09
General
- Target 2026-05-04_3dbd2e896a049763eaa3d9f8d50c2129_darkgate_elex_glassworm_luca-stealer_njrat_remcos_rhadamanthys_stop.exe
- Size 671KB
- Sample260504-vpfe3act5l
- SHA256 faee5dffa9554178be6f1bcd3ca57d58d5afae2744abe559866fa2fa7c037ba8
Malware Config
Signatures
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-05-04_3dbd2e896a049763eaa3d9f8d50c2129_darkgate_elex_glassworm_luca-stealer_njrat_remcos_rhadamanthys_stop.exe"C:\Users\Admin\AppData\Local\Temp\2026-05-04_3dbd2e896a049763eaa3d9f8d50c2129_darkgate_elex_glassworm_luca-stealer_njrat_remcos_rhadamanthys_stop.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1220-0-0x00007FFFB0F95000-0x00007FFFB0F96000-memory.dmp
memory/1220-1-0x00000000013D0000-0x00000000013F0000-memory.dmp
memory/1220-3-0x000000001BF90000-0x000000001C364000-memory.dmp
memory/1220-2-0x00007FFFB0CE0000-0x00007FFFB1681000-memory.dmp
memory/1220-4-0x00007FFFB0CE0000-0x00007FFFB1681000-memory.dmp
memory/1220-5-0x000000001C600000-0x000000001C736000-memory.dmp
memory/1220-6-0x00007FFFB0CE0000-0x00007FFFB1681000-memory.dmp
memory/1220-7-0x000000001CE00000-0x000000001D2CE000-memory.dmp
memory/1220-8-0x000000001D370000-0x000000001D40C000-memory.dmp
memory/1220-9-0x00007FFFB0CE0000-0x00007FFFB1681000-memory.dmp
memory/1220-10-0x00007FFFB0CE0000-0x00007FFFB1681000-memory.dmp
memory/1220-12-0x0000000001390000-0x000000000139C000-memory.dmp
memory/1220-13-0x00007FFFB0CE0000-0x00007FFFB1681000-memory.dmp