General
- Target 2026-07-17_65eb181c128916045cabd5d3167be6ab_darkgate_elex_glassworm_hijackloader_mimic
- Size 5.0MB
- Sample260718-d4mn9aat8s
- SHA256 80a4afc208ab5c0fafeacc26383d49dc07d614363916505897c1c8ddc6bc641f
- MD5 65eb181c128916045cabd5d3167be6ab
- SHA1 16c21d8df29f6f99f64ed29013b4f72b5152cbdc
- SHA512 d528d5ba6f11e5a0baa28c0e4cda7dc1a0fcdb32d0693342ae63c3e8fdf4e6499d458e1aaf07c820cde5b657e66dcb837be67c6c45c5d6261c77e7b222c1e3d3
- SSDEEP 98304:exyNWcJpJzAWTIJFfpSZZ6/2/5X08FKTKK4KKDyK5FZ1EEEEmEEE1EEEEEEEEEE5:7NjiiGFfpgciXZF3
- TLSH T19F368D107E41C176FBC202F59ABD7BFA466D9E20472C94DBC2983D5E4E701C32B366A6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-17_65eb181c128916045cabd5d3167be6ab_darkgate_elex_glassworm_hijackloader_mimic.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-17_65eb181c128916045cabd5d3167be6ab_darkgate_elex_glassworm_hijackloader_mimic.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-17_65eb181c128916045cabd5d3167be6ab_darkgate_elex_glassworm_hijackloader_mimic
- Size 5.0MB
- SHA256 80a4afc208ab5c0fafeacc26383d49dc07d614363916505897c1c8ddc6bc641f
- MD5 65eb181c128916045cabd5d3167be6ab
- SHA1 16c21d8df29f6f99f64ed29013b4f72b5152cbdc
- SHA512 d528d5ba6f11e5a0baa28c0e4cda7dc1a0fcdb32d0693342ae63c3e8fdf4e6499d458e1aaf07c820cde5b657e66dcb837be67c6c45c5d6261c77e7b222c1e3d3
- SSDEEP 98304:exyNWcJpJzAWTIJFfpSZZ6/2/5X08FKTKK4KKDyK5FZ1EEEEmEEE1EEEEEEEEEE5:7NjiiGFfpgciXZF3
- TLSH T19F368D107E41C176FBC202F59ABD7BFA466D9E20472C94DBC2983D5E4E701C32B366A6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.