General
- Target 2026-07-08_165c82c37c268dcbed90d3eb3dc5d791_darkgate_elex_glassworm_luca-stealer_medusalocker_mespinoza_njrat
- Size 3.5MB
- Sample260708-dc836shz4v
- SHA256 c942319971669efec4377007fa4973e8039d5cc8913bf5808eaa82264d67d8be
- MD5 165c82c37c268dcbed90d3eb3dc5d791
- SHA1 becfc77de0f73c0818ac81ebbf04f7fa9b0c94d1
- SHA512 b25e9f7c4ca078414fc6b2583a6d6918cda9580a6f20606a3ba0adface113fd501747f1a121a9d1aa4fa88e0a9244abf4d2eb9d29f7a00bd7dff366cbb996a53
- SSDEEP 49152:qf3SFp+FSFBM0vu9fHZV7JtzczeFAYy/SbgnSHhKxJnyWmpxZZsToJyS9BtzM6JD:OY+FMc9fHZV7cz+AYy/SbgEeBmpxZDX
- TLSH T1A8065C30F990DD32D16313714929F639206EAE601734E1CF7A9CFA1819F27D26A66E1F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
2026-07-08_165c82c37c268dcbed90d3eb3dc5d791_darkgate_elex_glassworm_luca-stealer_medusalocker_mespinoza_njrat.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-08_165c82c37c268dcbed90d3eb3dc5d791_darkgate_elex_glassworm_luca-stealer_medusalocker_mespinoza_njrat.exe
Resource
win11ltsc2024-20260706-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_165c82c37c268dcbed90d3eb3dc5d791_darkgate_elex_glassworm_luca-stealer_medusalocker_mespinoza_njrat
- Size 3.5MB
- SHA256 c942319971669efec4377007fa4973e8039d5cc8913bf5808eaa82264d67d8be
- MD5 165c82c37c268dcbed90d3eb3dc5d791
- SHA1 becfc77de0f73c0818ac81ebbf04f7fa9b0c94d1
- SHA512 b25e9f7c4ca078414fc6b2583a6d6918cda9580a6f20606a3ba0adface113fd501747f1a121a9d1aa4fa88e0a9244abf4d2eb9d29f7a00bd7dff366cbb996a53
- SSDEEP 49152:qf3SFp+FSFBM0vu9fHZV7JtzczeFAYy/SbgnSHhKxJnyWmpxZZsToJyS9BtzM6JD:OY+FMc9fHZV7cz+AYy/SbgEeBmpxZDX
- TLSH T1A8065C30F990DD32D16313714929F639206EAE601734E1CF7A9CFA1819F27D26A66E1F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.