General
- Target 2026-08-01_b2a2064fd44ca645e9e756daf6c34e22_darkgate_elex_glassworm_luca-stealer_medusalocker_njrat_remcos
- Size 963KB
- Sample260801-mn5pkaxyfz
- SHA256 27a5a13aabde65f7c57bf6fc51beb86176c8dba630f13140d35691c1de7cc8b4
- MD5 b2a2064fd44ca645e9e756daf6c34e22
- SHA1 0389933014064757f270a810b778f4718be22b69
- SHA512 c689150b1091249b90657ae35ef31694405b099f48fadd01280b615b5c43c62226e61902a52b967d96ea4312aa56b73254bf52236a23f8ac071277c0268100f9
- SSDEEP 24576:xHIWLNHK5SxfVCJiVMfmHEHbI21sZqLmvDeDYhNhb2onYD:PLNHK5SxfVCJ24pHB1fWbj2Z
- TLSH T10C259D2676D2803AE6B307315D39A29516BEF9315E32CB6F27C8121D1FB0651AF21B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-01_b2a2064fd44ca645e9e756daf6c34e22_darkgate_elex_glassworm_luca-stealer_medusalocker_njrat_remcos.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_b2a2064fd44ca645e9e756daf6c34e22_darkgate_elex_glassworm_luca-stealer_medusalocker_njrat_remcos
- Size 963KB
- SHA256 27a5a13aabde65f7c57bf6fc51beb86176c8dba630f13140d35691c1de7cc8b4
- MD5 b2a2064fd44ca645e9e756daf6c34e22
- SHA1 0389933014064757f270a810b778f4718be22b69
- SHA512 c689150b1091249b90657ae35ef31694405b099f48fadd01280b615b5c43c62226e61902a52b967d96ea4312aa56b73254bf52236a23f8ac071277c0268100f9
- SSDEEP 24576:xHIWLNHK5SxfVCJiVMfmHEHbI21sZqLmvDeDYhNhb2onYD:PLNHK5SxfVCJ24pHB1fWbj2Z
- TLSH T10C259D2676D2803AE6B307315D39A29516BEF9315E32CB6F27C8121D1FB0651AF21B73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL