General
- Target 2026-07-31_e0e5ba3e7b1afabe002669dd405ab305_darkgate_elex_gcleaner_glassworm_njrat_remcos_rhadamanthys_stealc_stop_tofsee
- Size 16.5MB
- Sample260731-krkgpaydrd
- SHA256 5646f41c5f1f4a51b500eeba960a53bab23c05976d718b99eed39ddd9a788728
- MD5 e0e5ba3e7b1afabe002669dd405ab305
- SHA1 3e94dc034f7f9d2aa81af68bf4a68696c37c9150
- SHA512 b4867840954ed256ca05b621908178d297f573b2e1807f6b384d40f43a10ab314c0a43f6e6082db8ac96f49de3f61f47479ee4be4fc79bea9788191b769589fe
- SSDEEP 98304:GyepsRtXpmZfb7LA6ZJX31pxCvW5nnim//7uvwCt5tuo32vWk4zKAspdqe3tk4HU:Gye2XAxtH319nnim//7uVtFZzzsjxM
- TLSH T1460771426300FD09D9BA36F1AA9047B501636F8DD125497F94703E2129F19E3FEE1AEE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-31_e0e5ba3e7b1afabe002669dd405ab305_darkgate_elex_gcleaner_glassworm_njrat_remcos_rhadamanthys_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-31_e0e5ba3e7b1afabe002669dd405ab305_darkgate_elex_gcleaner_glassworm_njrat_remcos_rhadamanthys_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_e0e5ba3e7b1afabe002669dd405ab305_darkgate_elex_gcleaner_glassworm_njrat_remcos_rhadamanthys_stealc_stop_tofsee
- Size 16.5MB
- SHA256 5646f41c5f1f4a51b500eeba960a53bab23c05976d718b99eed39ddd9a788728
- MD5 e0e5ba3e7b1afabe002669dd405ab305
- SHA1 3e94dc034f7f9d2aa81af68bf4a68696c37c9150
- SHA512 b4867840954ed256ca05b621908178d297f573b2e1807f6b384d40f43a10ab314c0a43f6e6082db8ac96f49de3f61f47479ee4be4fc79bea9788191b769589fe
- SSDEEP 98304:GyepsRtXpmZfb7LA6ZJX31pxCvW5nnim//7uvwCt5tuo32vWk4zKAspdqe3tk4HU:Gye2XAxtH319nnim//7uVtFZzzsjxM
- TLSH T1460771426300FD09D9BA36F1AA9047B501636F8DD125497F94703E2129F19E3FEE1AEE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with ConfuserEx Mod
-
ConfuserEx .NET packer
Detects ConfuserEx .NET packer.