General
- Target 2026-07-20_08b8ba6206afff4d3b5b7408fd646fbc_darkgate_elex_glassworm_luca-stealer_mespinoza_njrat_remcos
- Size 1.7MB
- Sample260720-d5ltcad14n
- SHA256 c8a496ce48330cbcb219efe5f044c54c31f174f3b71858bb3537710f3f5c4e1a
- MD5 08b8ba6206afff4d3b5b7408fd646fbc
- SHA1 87ed5b13a3a1688be7837742c6a0053734f3c465
- SHA512 e6adf9ebef723c5d9b367b7aa8e18d980dcc3d25a427549e5c0efde2fa7164c92960bed41d93d81452d0966455bbe5c33b80558007cc6e983e6aa470f83683ad
- SSDEEP 12288:NWl7hT4DXJFWKZaaLq2njmtv8TN5TkDM1nNu5j1ZEfkqF544H7DDxcAiEXN:0l7iFWKZaObCtv8TN5TK4t40DDxcAFXN
- TLSH T11385720BA6F9C114F5B2A770DAB542F6197A7E40DB38C5CF524B3C5C3478AB0AA20767
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-20_08b8ba6206afff4d3b5b7408fd646fbc_darkgate_elex_glassworm_luca-stealer_mespinoza_njrat_remcos.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_08b8ba6206afff4d3b5b7408fd646fbc_darkgate_elex_glassworm_luca-stealer_mespinoza_njrat_remcos.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_08b8ba6206afff4d3b5b7408fd646fbc_darkgate_elex_glassworm_luca-stealer_mespinoza_njrat_remcos
- Size 1.7MB
- SHA256 c8a496ce48330cbcb219efe5f044c54c31f174f3b71858bb3537710f3f5c4e1a
- MD5 08b8ba6206afff4d3b5b7408fd646fbc
- SHA1 87ed5b13a3a1688be7837742c6a0053734f3c465
- SHA512 e6adf9ebef723c5d9b367b7aa8e18d980dcc3d25a427549e5c0efde2fa7164c92960bed41d93d81452d0966455bbe5c33b80558007cc6e983e6aa470f83683ad
- SSDEEP 12288:NWl7hT4DXJFWKZaaLq2njmtv8TN5TkDM1nNu5j1ZEfkqF544H7DDxcAiEXN:0l7iFWKZaObCtv8TN5TK4t40DDxcAFXN
- TLSH T11385720BA6F9C114F5B2A770DAB542F6197A7E40DB38C5CF524B3C5C3478AB0AA20767
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects MetaQuotes adware
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.