General
- Target 2026-07-10_e3823e809fdc7b9a43ef20b2be3e5295_darkgate_elex_glassworm_luca-stealer_mespinoza_njrat_remcos
- Size 1.6MB
- Sample260710-c67xjadt7z
- SHA256 67afe748d46be1f00ad237a810a8d089774e56699bcdcb4ec0571ef62ec909ea
- MD5 e3823e809fdc7b9a43ef20b2be3e5295
- SHA1 65e0e0b2c1b9e75bab646f2db66b50168969a814
- SHA512 b5fa142b37ded5bfc5d94ed0553aa983967691c73daab02fbfb75022f7b627c651d4555450f85a3b26428116a365055509b1f0c23ffa316b74fe528284b73e44
- SSDEEP 24576:YjEt0EdZywJBFRAQntxdRvzkSHCytY4eWLiSEk2DlsqjnhMgeiCl7G0nehbGZpbD:YnEdzHtxdRvVl2DZDmg27RnWGj
- TLSH T19C85AF6037CA813AF6B211725E7CD66B543EBA620F3281CF62D8495E6970DC11E37B27
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-10_e3823e809fdc7b9a43ef20b2be3e5295_darkgate_elex_glassworm_luca-stealer_mespinoza_njrat_remcos.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-10_e3823e809fdc7b9a43ef20b2be3e5295_darkgate_elex_glassworm_luca-stealer_mespinoza_njrat_remcos
- Size 1.6MB
- SHA256 67afe748d46be1f00ad237a810a8d089774e56699bcdcb4ec0571ef62ec909ea
- MD5 e3823e809fdc7b9a43ef20b2be3e5295
- SHA1 65e0e0b2c1b9e75bab646f2db66b50168969a814
- SHA512 b5fa142b37ded5bfc5d94ed0553aa983967691c73daab02fbfb75022f7b627c651d4555450f85a3b26428116a365055509b1f0c23ffa316b74fe528284b73e44
- SSDEEP 24576:YjEt0EdZywJBFRAQntxdRvzkSHCytY4eWLiSEk2DlsqjnhMgeiCl7G0nehbGZpbD:YnEdzHtxdRvVl2DZDmg27RnWGj
- TLSH T19C85AF6037CA813AF6B211725E7CD66B543EBA620F3281CF62D8495E6970DC11E37B27
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1