General
- Target 2026-07-06_4dd79afc4999383f13625a04de7fd7fc_darkgate_elex_emotet_gcleaner_glassworm_helldown_remcos
- Size 1.9MB
- Sample260706-mg4tpahy2n
- SHA256 7cfb5922d0eed41289ccc0eb256f663642cf2d6c1ca1a8780ec9e757cfd80ab3
- MD5 4dd79afc4999383f13625a04de7fd7fc
- SHA1 f0a1eddab6bc03847c835ae775a601fd771c9d2d
- SHA512 922299bd09109250e5d913013d1f0e46b4b2927a887d8cc0234852f36af6a1b02bd4ca93f3aad03e10bc1cd3449e761d2cdfbfb6a5459ec8807f6436bbdaf87f
- SSDEEP 24576:OYkuhnbIhIcKhDwaruE5EAdFTuWpABiIfC7wLqNy48HuhoxuAYWTaboyxjQs+u51:OWnhDwkTL7p7QCJNy4QVOUdATF
- TLSH T19F958D13E68284F2C2551A30496A673BE734EF640F34CAC7E7E4ED792E32252D53B259
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-06_4dd79afc4999383f13625a04de7fd7fc_darkgate_elex_emotet_gcleaner_glassworm_helldown_remcos.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_4dd79afc4999383f13625a04de7fd7fc_darkgate_elex_emotet_gcleaner_glassworm_helldown_remcos
- Size 1.9MB
- SHA256 7cfb5922d0eed41289ccc0eb256f663642cf2d6c1ca1a8780ec9e757cfd80ab3
- MD5 4dd79afc4999383f13625a04de7fd7fc
- SHA1 f0a1eddab6bc03847c835ae775a601fd771c9d2d
- SHA512 922299bd09109250e5d913013d1f0e46b4b2927a887d8cc0234852f36af6a1b02bd4ca93f3aad03e10bc1cd3449e761d2cdfbfb6a5459ec8807f6436bbdaf87f
- SSDEEP 24576:OYkuhnbIhIcKhDwaruE5EAdFTuWpABiIfC7wLqNy48HuhoxuAYWTaboyxjQs+u51:OWnhDwkTL7p7QCJNy4QVOUdATF
- TLSH T19F958D13E68284F2C2551A30496A673BE734EF640F34CAC7E7E4ED792E32252D53B259
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.