General
- Target 2026-07-06_a2cb1b43141aae3d209f86a2f86aaa5e_darkgate_elex_glassworm_mafia_revil
- Size 10.9MB
- Sample260707-b9y85afw41
- SHA256 18b3ad26f32f52d09e94a9159cc3c769cc49ee7788144baf398bebf6ab0b795f
- MD5 a2cb1b43141aae3d209f86a2f86aaa5e
- SHA1 af9aaf3fec79dab18e297976cc4949435bf0c05a
- SHA512 6e6f81269fc022c8b6ba6e552014b4a5808611c4673c2c07e16184557884771364fa3d90e3cf28823d1f7ca5551ab481ffb06fbb6a5f344389866ec65129f323
- SSDEEP 196608:TmLCut24KkZO7BYYNkuCyTm1X7Uc40P7n/PjN11zy/zHRc2Q0CvivgC6d8Cp:f4KkWYWkuCyTm1X7Uc40P7n/Pj3I/T29
- TLSH T1B8B6D071F79220E1CA8B007164B83B0FA9398D445B615FD793982D2EDE722D0E5BB35E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-06_a2cb1b43141aae3d209f86a2f86aaa5e_darkgate_elex_glassworm_mafia_revil.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_a2cb1b43141aae3d209f86a2f86aaa5e_darkgate_elex_glassworm_mafia_revil.exe
Resource
win11ltsc2024-20260706-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_a2cb1b43141aae3d209f86a2f86aaa5e_darkgate_elex_glassworm_mafia_revil
- Size 10.9MB
- SHA256 18b3ad26f32f52d09e94a9159cc3c769cc49ee7788144baf398bebf6ab0b795f
- MD5 a2cb1b43141aae3d209f86a2f86aaa5e
- SHA1 af9aaf3fec79dab18e297976cc4949435bf0c05a
- SHA512 6e6f81269fc022c8b6ba6e552014b4a5808611c4673c2c07e16184557884771364fa3d90e3cf28823d1f7ca5551ab481ffb06fbb6a5f344389866ec65129f323
- SSDEEP 196608:TmLCut24KkZO7BYYNkuCyTm1X7Uc40P7n/PjN11zy/zHRc2Q0CvivgC6d8Cp:f4KkWYWkuCyTm1X7Uc40P7n/Pj3I/T29
- TLSH T1B8B6D071F79220E1CA8B007164B83B0FA9398D445B615FD793982D2EDE722D0E5BB35E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.