General
- Target 2026-06-27_80ea15589d637f604607b255e3a8dd78_darkgate_elex_glassworm_luca-stealer_magniber_medusalocker_mespinoza_njrat_remcos
- Size 5.5MB
- Sample260629-gbb9lafv7k
- SHA256 0c5a26c67d55cebe7a544427a8c5003d389ee899259d939f714216458658d8a7
- MD5 80ea15589d637f604607b255e3a8dd78
- SHA1 59bfdb6e0950df62632d3dc8faef6976ed682746
- SHA512 aefbc63deb844964c26d83f6f9d16553c83d2815414d50ac7e2879225698f75d900a10669a42d6ab2ed86b950fd0e45e53b0c97c6a6a734ab9aa43e937e5f6b9
- SSDEEP 49152:uDOyWSWPjDixObm5CoYqhx6b8MM9XM7P0RJZUTjIMS9W0BihL67Sy5BpNTVMKHUI:lZDixObwCojLjjXIP0ormU023W
- TLSH T17846E642A3E944A4F1B32B7569361A714A77BD115F38C88FA68CAC1D0BF36C1D530B6B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-27_80ea15589d637f604607b255e3a8dd78_darkgate_elex_glassworm_luca-stealer_magniber_medusalock.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-27_80ea15589d637f604607b255e3a8dd78_darkgate_elex_glassworm_luca-stealer_magniber_medusalocker_mespinoza_njrat_remcos
- Size 5.5MB
- SHA256 0c5a26c67d55cebe7a544427a8c5003d389ee899259d939f714216458658d8a7
- MD5 80ea15589d637f604607b255e3a8dd78
- SHA1 59bfdb6e0950df62632d3dc8faef6976ed682746
- SHA512 aefbc63deb844964c26d83f6f9d16553c83d2815414d50ac7e2879225698f75d900a10669a42d6ab2ed86b950fd0e45e53b0c97c6a6a734ab9aa43e937e5f6b9
- SSDEEP 49152:uDOyWSWPjDixObm5CoYqhx6b8MM9XM7P0RJZUTjIMS9W0BihL67Sy5BpNTVMKHUI:lZDixObwCojLjjXIP0ormU023W
- TLSH T17846E642A3E944A4F1B32B7569361A714A77BD115F38C88FA68CAC1D0BF36C1D530B6B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1