General
- Target 2026-07-17_54e2093b3ca649a7164c26a781f7f21f_acrstealer_amadey_darkgate_elex_gcleaner_glassworm_poet-rat_remcos_smoke-loader_stop
- Size 13.5MB
- Sample260717-2v76lab19w
- SHA256 fd15d59e55ac603e7f1732db56012a732432ded79a61e4ca58e47994b5093b54
- MD5 54e2093b3ca649a7164c26a781f7f21f
- SHA1 3fbb64cfa6cc421a98397714eaeda40b2c6e6f5d
- SHA512 a3b4bb1bd62172f2c458e16d6a12a8185359991b083bb0b450c433448b0b5a283f7924901ff9c6b88585d92846b383c39a94b9524530f19b34e02038810e2424
- SSDEEP 196608:HygP2sgi087W81OPYY6hMiV+WqOSdfURPRdZ4Ny09nJ6i3odPHK3pco/S1:HygV7W81OPBJOecIFQi3gqi
- TLSH T1D3E6E113B385153AE4A61A3B4837AAD0697B7F702A128D5F37EC1D8C4F36641763AB43
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-17_54e2093b3ca649a7164c26a781f7f21f_acrstealer_amadey_darkgate_elex_gcleaner_glassworm_poet-.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-17_54e2093b3ca649a7164c26a781f7f21f_acrstealer_amadey_darkgate_elex_gcleaner_glassworm_poet-.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-17_54e2093b3ca649a7164c26a781f7f21f_acrstealer_amadey_darkgate_elex_gcleaner_glassworm_poet-rat_remcos_smoke-loader_stop
- Size 13.5MB
- SHA256 fd15d59e55ac603e7f1732db56012a732432ded79a61e4ca58e47994b5093b54
- MD5 54e2093b3ca649a7164c26a781f7f21f
- SHA1 3fbb64cfa6cc421a98397714eaeda40b2c6e6f5d
- SHA512 a3b4bb1bd62172f2c458e16d6a12a8185359991b083bb0b450c433448b0b5a283f7924901ff9c6b88585d92846b383c39a94b9524530f19b34e02038810e2424
- SSDEEP 196608:HygP2sgi087W81OPYY6hMiV+WqOSdfURPRdZ4Ny09nJ6i3odPHK3pco/S1:HygV7W81OPBJOecIFQi3gqi
- TLSH T1D3E6E113B385153AE4A61A3B4837AAD0697B7F702A128D5F37EC1D8C4F36641763AB43
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Detects executables referencing many varying, potentially fake Windows User-Agents