General
- Target 2026-07-02_61c27b0b7f69f1a830cf509bb865d666_darkgate_elex_glassworm_hijackloader_luca-stealer_medusalocker_mespinoza_njrat_remcos
- Size 3.1MB
- Sample260702-nqqtvsg141
- SHA256 8e2b9c0cd60283c4d2d2b10a982d90f7b7aa0191c5f821d00185ea5dbb265e30
- MD5 61c27b0b7f69f1a830cf509bb865d666
- SHA1 d1b68017059964381d445d6767fab0ab2685c521
- SHA512 aedd39bdc2c94688fe63df0eac7c2bca7e6fb4eabe4c9768e0687f7241a96c1f69f6c563c0ac7faba44e9c2f6c6491318f1729a2f6dffb1897ccb88d6779c1fb
- SSDEEP 98304:Y0sH9aWaWoBShzUe4fOGpozWmNejontIAm+:O9RomUe4fOIfmeotIAm+
- TLSH T18AE5F132B940C07BE2A34631A96D6B7A9ABCBA30173540D7B3D40D1D5EF04D2E639B67
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-02_61c27b0b7f69f1a830cf509bb865d666_darkgate_elex_glassworm_hijackloader_luca-stealer_medusa.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_61c27b0b7f69f1a830cf509bb865d666_darkgate_elex_glassworm_hijackloader_luca-stealer_medusa.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_61c27b0b7f69f1a830cf509bb865d666_darkgate_elex_glassworm_hijackloader_luca-stealer_medusalocker_mespinoza_njrat_remcos
- Size 3.1MB
- SHA256 8e2b9c0cd60283c4d2d2b10a982d90f7b7aa0191c5f821d00185ea5dbb265e30
- MD5 61c27b0b7f69f1a830cf509bb865d666
- SHA1 d1b68017059964381d445d6767fab0ab2685c521
- SHA512 aedd39bdc2c94688fe63df0eac7c2bca7e6fb4eabe4c9768e0687f7241a96c1f69f6c563c0ac7faba44e9c2f6c6491318f1729a2f6dffb1897ccb88d6779c1fb
- SSDEEP 98304:Y0sH9aWaWoBShzUe4fOGpozWmNejontIAm+:O9RomUe4fOIfmeotIAm+
- TLSH T18AE5F132B940C07BE2A34631A96D6B7A9ABCBA30173540D7B3D40D1D5EF04D2E639B67
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.