General
- Target 2026-07-22_6ccd44e6ad11158d28e1fbf4c15dd1fc_darkgate_elex_gcleaner_glassworm_swisyn_wannacry
- Size 12.0MB
- Sample260722-3tf66aar4y
- SHA256 e2374cc87588fa793bcb929cd67826bce25bae3e0085f91b50cbe01db92a4496
- MD5 6ccd44e6ad11158d28e1fbf4c15dd1fc
- SHA1 9b7afdacfaf6d0ffdd02dd14cb8762a720a9a780
- SHA512 7e7aaf34b3f459e63844fbc8bdb313425d67424f6845177fb4c02efc11f3db8486a2178b4eb4a46293b97e2ee597f520edab6a8115d4cf1337857456a621d413
- SSDEEP 196608:t0oANjWv1Bs0uTk27kct070sYLgNGaN0UzuY6LQ1CobocUtElbEUS3sTc+V9h9aM:tHANjWvgfT77wM/aQUOy
- TLSH T109D67D02B380A827F15A0AB18935D7B97275FE652B2186076EE42F1F3E717807D2E747
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-22_6ccd44e6ad11158d28e1fbf4c15dd1fc_darkgate_elex_gcleaner_glassworm_swisyn_wannacry.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-22_6ccd44e6ad11158d28e1fbf4c15dd1fc_darkgate_elex_gcleaner_glassworm_swisyn_wannacry.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-22_6ccd44e6ad11158d28e1fbf4c15dd1fc_darkgate_elex_gcleaner_glassworm_swisyn_wannacry
- Size 12.0MB
- SHA256 e2374cc87588fa793bcb929cd67826bce25bae3e0085f91b50cbe01db92a4496
- MD5 6ccd44e6ad11158d28e1fbf4c15dd1fc
- SHA1 9b7afdacfaf6d0ffdd02dd14cb8762a720a9a780
- SHA512 7e7aaf34b3f459e63844fbc8bdb313425d67424f6845177fb4c02efc11f3db8486a2178b4eb4a46293b97e2ee597f520edab6a8115d4cf1337857456a621d413
- SSDEEP 196608:t0oANjWv1Bs0uTk27kct070sYLgNGaN0UzuY6LQ1CobocUtElbEUS3sTc+V9h9aM:tHANjWvgfT77wM/aQUOy
- TLSH T109D67D02B380A827F15A0AB18935D7B97275FE652B2186076EE42F1F3E717807D2E747
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory