2026-07-03_57691625bcea2f115c3e9a91c38003a7_darkgate_elex_glassworm_remcos_stop
- IMPHASH 9ea15ce9f38eef7cd5e7c61580deee29
- SHA256 fd91cd8dcd173e1b39d3a257caa5114929b0355af7ea9d78eeef1f1cac26f25e
-
Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers
-
Detects executables containing SQL queries to confidential data stores. Observed in infostealers
generic
count=13, id=150, version=20413,
count=17, id=109, productName=VS2005 build 50727, version=50727,
count=15, id=123, productName=VS2005 build 50727, version=50727,
count=44, id=149, productName=VS2008 SP1 build 30729, version=30729,
count=215, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=8, id=132, productName=VS2008 build 21022, version=21022,
count=757, id=1, productName=Unmarked objects,
count=477, id=132, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,