General

  • Target
    2026-06-30_4e307e1f677c8f4dea0e9a53f485ce14_darkgate_elex_gcleaner_glassworm_luca-stealer_njrat_remcos_smoke-loader
  • Size 6.4MB
  • Sample260701-fp9xcaex9k
  • SHA256 0a83949f5df501367ec2acf6d9d9b298978e07ec28d07199d0635d4fc2ec02f6
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-06-30_4e307e1f677c8f4dea0e9a53f485ce14_darkgate_elex_gcleaner_glassworm_luca-stealer_njrat_remcos_smoke-loader
    • Size 6.4MB
    • SHA256 0a83949f5df501367ec2acf6d9d9b298978e07ec28d07199d0635d4fc2ec02f6
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v16

Tasks