General
- Target 2026-07-12_2eaa9b9c5be8ae7958e5641ed488c633_darkgate_elex_glassworm_luca-stealer_magniber_medusalocker_mespinoza_njrat_remcos
- Size 5.6MB
- Sample260712-v3fb8aev2j
- SHA256 897dd46ad2a3f181e004497003d21349bc3e91ce0f25ab1f731411e5ec5d50c8
- MD5 2eaa9b9c5be8ae7958e5641ed488c633
- SHA1 a882de6546c2b6d75bda9c995d5d94b291e86c8b
- SHA512 3ec6e49797b6d4c3523b7361fbf5e4560d45eb919ada30e82053346ad85f38b910588417aec1788e3e53b904229a449a4eb7b0cf57bc57f807a2c6e44873809e
- SSDEEP 49152:RkCF9MKZQttyVQBG5PVOvx+iig9w4qQv6zJ/T7gH0a0BihL67Sy5BpNTVb6SEiJ0:heXttyVhPVMn0ajE67mqrWETR9b
- TLSH T10646E642A3E944A4F1F32B756A3619714A77BD115F38C88FA68CAC1D0BF3681D530B6B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-12_2eaa9b9c5be8ae7958e5641ed488c633_darkgate_elex_glassworm_luca-stealer_magniber_medusalock.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-12_2eaa9b9c5be8ae7958e5641ed488c633_darkgate_elex_glassworm_luca-stealer_magniber_medusalocker_mespinoza_njrat_remcos
- Size 5.6MB
- SHA256 897dd46ad2a3f181e004497003d21349bc3e91ce0f25ab1f731411e5ec5d50c8
- MD5 2eaa9b9c5be8ae7958e5641ed488c633
- SHA1 a882de6546c2b6d75bda9c995d5d94b291e86c8b
- SHA512 3ec6e49797b6d4c3523b7361fbf5e4560d45eb919ada30e82053346ad85f38b910588417aec1788e3e53b904229a449a4eb7b0cf57bc57f807a2c6e44873809e
- SSDEEP 49152:RkCF9MKZQttyVQBG5PVOvx+iig9w4qQv6zJ/T7gH0a0BihL67Sy5BpNTVb6SEiJ0:heXttyVhPVMn0ajE67mqrWETR9b
- TLSH T10646E642A3E944A4F1F32B756A3619714A77BD115F38C88FA68CAC1D0BF3681D530B6B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1