General
- Target 2026-07-14_b01610f1cd07ba286f32dc411a88fd2e_darkgate_elex_glassworm_hijackloader_luca-stealer_medusalocker_mespinoza_njrat_remcos
- Size 3.1MB
- Sample260714-tzbn7abs6w
- SHA256 dc53beee3351023531a2811af01fee7e7dd7a08d20bd8ad8d68f89ee2b6d4602
- MD5 b01610f1cd07ba286f32dc411a88fd2e
- SHA1 cd722d6080010125d06f133a94e4b33322b724f9
- SHA512 0be8d3c168d5da47771bbd525df9265489200ad327aad4033dab38db019eab662cb0b2e0ef740eee732159fa94f707a6c39319bb51db3063f6ce214245eaa0cb
- SSDEEP 98304:X29dxdhGvfmamX3/fPWmF2NOUp40Kzz++BGtZUhVloNXV+UcjwZejgkDdKhQmtWK:G9FqmxXPh2NMe
- TLSH T192E5BF11BA408532F5B30B35997D6A6D896CBD311734A4DFA3C0396D0AB49E2BE32F17
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-14_b01610f1cd07ba286f32dc411a88fd2e_darkgate_elex_glassworm_hijackloader_luca-stealer_medusa.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-14_b01610f1cd07ba286f32dc411a88fd2e_darkgate_elex_glassworm_hijackloader_luca-stealer_medusa.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-14_b01610f1cd07ba286f32dc411a88fd2e_darkgate_elex_glassworm_hijackloader_luca-stealer_medusalocker_mespinoza_njrat_remcos
- Size 3.1MB
- SHA256 dc53beee3351023531a2811af01fee7e7dd7a08d20bd8ad8d68f89ee2b6d4602
- MD5 b01610f1cd07ba286f32dc411a88fd2e
- SHA1 cd722d6080010125d06f133a94e4b33322b724f9
- SHA512 0be8d3c168d5da47771bbd525df9265489200ad327aad4033dab38db019eab662cb0b2e0ef740eee732159fa94f707a6c39319bb51db3063f6ce214245eaa0cb
- SSDEEP 98304:X29dxdhGvfmamX3/fPWmF2NOUp40Kzz++BGtZUhVloNXV+UcjwZejgkDdKhQmtWK:G9FqmxXPh2NMe
- TLSH T192E5BF11BA408532F5B30B35997D6A6D896CBD311734A4DFA3C0396D0AB49E2BE32F17
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.