General
- Target 2026-07-31_c395e92e1923dd53976ac40b6c4b0f54_darkgate_elex_gcleaner_glassworm_remcos_stop
- Size 139.2MB
- Sample260731-m7g3ls1fkb
- SHA256 e9075fd24162474df042563e79cf8adc89bc5226b6099e3d17dd9aa5ba7a7178
- MD5 c395e92e1923dd53976ac40b6c4b0f54
- SHA1 779997569a49a7156a6a0eee73d31e2a1ce24116
- SHA512 3205017f637d87976867110f75910b92402991c745a4b3ead535129e6463d03579d3ac3e615214f9a758c16aded1cd34b7d1409a0f2075096d30826918187549
- SSDEEP 3145728:k5ZV4DriaRcOyY13Dlr7DsMql7hxR9AB5J3DrwK:kPViriaRdyY13Dl3q7hxR9AB5J3Dj
- TLSH T168680141F79B95E2F4170A314AA6936BD521AE101B2097C7FB9C3F1B5F332E19B3610A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-31_c395e92e1923dd53976ac40b6c4b0f54_darkgate_elex_gcleaner_glassworm_remcos_stop.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-31_c395e92e1923dd53976ac40b6c4b0f54_darkgate_elex_gcleaner_glassworm_remcos_stop.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_c395e92e1923dd53976ac40b6c4b0f54_darkgate_elex_gcleaner_glassworm_remcos_stop
- Size 139.2MB
- SHA256 e9075fd24162474df042563e79cf8adc89bc5226b6099e3d17dd9aa5ba7a7178
- MD5 c395e92e1923dd53976ac40b6c4b0f54
- SHA1 779997569a49a7156a6a0eee73d31e2a1ce24116
- SHA512 3205017f637d87976867110f75910b92402991c745a4b3ead535129e6463d03579d3ac3e615214f9a758c16aded1cd34b7d1409a0f2075096d30826918187549
- SSDEEP 3145728:k5ZV4DriaRcOyY13Dlr7DsMql7hxR9AB5J3DrwK:kPViriaRdyY13Dl3q7hxR9AB5J3Dj
- TLSH T168680141F79B95E2F4170A314AA6936BD521AE101B2097C7FB9C3F1B5F332E19B3610A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects packed executables observed in Molerats
-
Loads dropped DLL