General

  • Target
    2026-06-27_e672af1916c30fb2fcf13e41f3fae690_darkgate_elex_gcleaner_glassworm_helldown
  • Size 8.3MB
  • Sample260629-b9f3jsax3x
  • SHA256 05c877e57b25c37e75b8c2a07a5f0ecc31e3b1bb8d12aeb9554c93dcde4ce621
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • 2026-06-27_e672af1916c30fb2fcf13e41f3fae690_darkgate_elex_gcleaner_glassworm_helldown
    .exe 8.3MB

2026-06-27_e672af1916c30fb2fcf13e41f3fae690_darkgate_elex_gcleaner_glassworm_helldown

  • SHA256 05c877e57b25c37e75b8c2a07a5f0ecc31e3b1bb8d12aeb9554c93dcde4ce621
  • MD5 SHA1 SHA512 SSDEEP TLSH
Digest
32:55:60:19:c0:ec:39:93:b6:f7:3d:36:8e:a7:cd:0c:f8:72:f0:03:d4:53:0f:10:0c:e4:67:69:73:63:72:e7
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=2023017896,CN=FastStone Corporation,O=FastStone Corporation,L=Calgary,ST=Alberta,C=CA,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#1307416c6265727461,1.3.6.1.4.1.311.60.2.1.3=#13024341
Minor OS version
0
Major OS version
4
Entry point
6966048
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI
PDB paths