General

  • Target
    2026-07-27_3210a60446c4d016cc2a3083e1d6be9a_darkgate_elex_glassworm_remcos_revil_stealc_stop
  • Size 2.9MB
  • Sample260728-ap12jsvyf1
  • SHA256 b9f5652456de2f73b50f7f290244d27ecd62622206034dfc4cd2c70c9081d011
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • 2026-07-27_3210a60446c4d016cc2a3083e1d6be9a_darkgate_elex_glassworm_remcos_revil_stealc_stop
    .exe 2.9MB

2026-07-27_3210a60446c4d016cc2a3083e1d6be9a_darkgate_elex_glassworm_remcos_revil_stealc_stop

  • IMPHASH c97193293da474cc40a4596a19b41069
  • SHA256 b9f5652456de2f73b50f7f290244d27ecd62622206034dfc4cd2c70c9081d011
  • MD5 SHA1 SHA512 SSDEEP TLSH
Digest
2d:c2:07:1f:2b:9d:98:67:58:5d:a3:3a:7d:09:66:50:6c:42:88:a9:aa:01:f7:1b:00:58:ff:f2:5b:20:4d:76
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=芜湖破军网络科技有限公司,O=芜湖破军网络科技有限公司,L=芜湖市,ST=安徽省,C=CN
Minor OS version
0
Major OS version
5
Entry point
661329
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths