General
- Target 2026-07-17_0fa3b4e466cbebe2e4d167e8e4a0677f_acrstealer_darkgate_elex_gcleaner_glassworm_poet-rat_remcos_trigona
- Size 34.1MB
- Sample260717-fw2vbae17s
- SHA256 6caac12e1a6b481a79781a1170454d5a8a6a4ca5dd0c3fe39ef32fe81078131a
- MD5 0fa3b4e466cbebe2e4d167e8e4a0677f
- SHA1 6ce5de2ec607ac95371496377d5efdafc31c94a4
- SHA512 3959a3109bd44f07c7dfbe7bfc7fad3a591ced4b86735dc8071984ca09124455a8aec010f26cb81e43043f97299da76ca2e4a034de8a9a75da60d18034f7ee48
- SSDEEP 786432:536cdEqn/F54V7TYk6UBc4TQpAJUrej+7aPNpq:53zEqn/F54lTmUq4smJUKFpq
- TLSH T1C677F103B280903ED46B1F3A982BA291593BBE316A159C4777F8BD4C9F3A7407D29747
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-17_0fa3b4e466cbebe2e4d167e8e4a0677f_acrstealer_darkgate_elex_gcleaner_glassworm_poet-rat_remcos_trigona.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-17_0fa3b4e466cbebe2e4d167e8e4a0677f_acrstealer_darkgate_elex_gcleaner_glassworm_poet-rat_remcos_trigona.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-17_0fa3b4e466cbebe2e4d167e8e4a0677f_acrstealer_darkgate_elex_gcleaner_glassworm_poet-rat_remcos_trigona
- Size 34.1MB
- SHA256 6caac12e1a6b481a79781a1170454d5a8a6a4ca5dd0c3fe39ef32fe81078131a
- MD5 0fa3b4e466cbebe2e4d167e8e4a0677f
- SHA1 6ce5de2ec607ac95371496377d5efdafc31c94a4
- SHA512 3959a3109bd44f07c7dfbe7bfc7fad3a591ced4b86735dc8071984ca09124455a8aec010f26cb81e43043f97299da76ca2e4a034de8a9a75da60d18034f7ee48
- SSDEEP 786432:536cdEqn/F54V7TYk6UBc4TQpAJUrej+7aPNpq:53zEqn/F54lTmUq4smJUKFpq
- TLSH T1C677F103B280903ED46B1F3A982BA291593BBE316A159C4777F8BD4C9F3A7407D29747
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
UAC bypass
MITRE ATT&CK Enterprise v16
Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Defense Evasion
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Impair Defenses
1Disable or Modify Tools
1Modify Registry
2