Analysis
- max time kernel
0s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260706-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260706-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
09/07/2026, 17:47
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-09_300ad6f0e17d09a142623d803f53985e_darkgate_elex_hijackloader_redline-stealer_remcos_rhadam.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-09_300ad6f0e17d09a142623d803f53985e_darkgate_elex_hijackloader_redline-stealer_remcos_rhadam.exe
Resource
win11ltsc2024-20260706-en
0 signatures
150 seconds
Errors
Reason
Payload did not run: image=C:\Users\Admin\AppData\Local\Temp\2026-07-09_300ad6f0e17d09a142623d803f53985e_darkgate_elex_hijackloader_redline-stealer_remcos_rhadam.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-07-09_300ad6f0e17d09a142623d803f53985e_darkgate_elex_hijackloader_redline-stealer_remcos_rhadam.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: %1 is not a valid Win32 application.
General
- Target 2026-07-09_300ad6f0e17d09a142623d803f53985e_darkgate_elex_hijackloader_redline-stealer_remcos_rhadam.exe
- Size 681KB
- Sample260709-wc83aaez7j
- SHA256 d0efe8a0c5385aa0283847e62817d2721850661ade4bcb54df5c35a833614879
- MD5 300ad6f0e17d09a142623d803f53985e
- SHA1 981ffc2f1cb00d697039f10d04a81265f2b17163
- SHA512 c6d484fc1cca7d99e263dfd04543df175c6113727168fd767b76c54fd6b650dabf20f7e2cc1a83bd2ca7d33194cd0b8c581c9660fb842ed52f9e30d35082d8a7
- SSDEEP 12288:bL9+gtg6ZsICvgzdXSp/4TMve1ZnPX542J17agcSLM74kNZQczUB2R77yllpDANn:bL9bu6tsg9SpgT7O8AKA5ank
- TLSH T1CDE42732A2F19932F862307155ABA976A59DED350B84D0CFB7D4FC2139322C2F276359
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10