General
- Target 2026-06-02_4ddb76d2cdc85675bda61616c89a9c94_darkgate_elex_glassworm_luca-stealer_njrat_remcos_swisyn_wannacry
- Size 5.1MB
- Sample260602-vlw9eabs6x
- SHA256 961e45a5367b01452ddfee93eb0d134e770e6a8e2bbd0f081eb949e46e9017f6
- MD5 4ddb76d2cdc85675bda61616c89a9c94
- SHA1 23ecf8d3f4f3a758fc261d333617d638f6070f07
- SHA512 b552cb4df7b70958992c10205faf832a31f2bbc4066ba77c984bb8af6d4002094c89008def700582b2c41f6276531a1fc1ff48a94acc72ce66ed3b2d7ddbc559
- SSDEEP 49152:txPcYIDNKhzevIwyWyL1beNu7TjsKzPPWwk/Ou9ZvTamEel+0BihL67Sy5BpNTVT:cCzevIw3yLRK6EunZ6Zczu
- TLSH T19E36C54263E944A4F1B32B75693619714A77BE115F38C88FA68CAC1D0BF36C1E530B6B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-02_4ddb76d2cdc85675bda61616c89a9c94_darkgate_elex_glassworm_luca-stealer_njrat_remcos_swisyn_wannacry.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-02_4ddb76d2cdc85675bda61616c89a9c94_darkgate_elex_glassworm_luca-stealer_njrat_remcos_swisyn_wannacry.exe
Resource
win11-20260513-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-02_4ddb76d2cdc85675bda61616c89a9c94_darkgate_elex_glassworm_luca-stealer_njrat_remcos_swisyn_wannacry
- Size 5.1MB
- SHA256 961e45a5367b01452ddfee93eb0d134e770e6a8e2bbd0f081eb949e46e9017f6
- MD5 4ddb76d2cdc85675bda61616c89a9c94
- SHA1 23ecf8d3f4f3a758fc261d333617d638f6070f07
- SHA512 b552cb4df7b70958992c10205faf832a31f2bbc4066ba77c984bb8af6d4002094c89008def700582b2c41f6276531a1fc1ff48a94acc72ce66ed3b2d7ddbc559
- SSDEEP 49152:txPcYIDNKhzevIwyWyL1beNu7TjsKzPPWwk/Ou9ZvTamEel+0BihL67Sy5BpNTVT:cCzevIw3yLRK6EunZ6Zczu
- TLSH T19E36C54263E944A4F1B32B75693619714A77BE115F38C88FA68CAC1D0BF36C1E530B6B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory