General

  • Target
    2026-08-01_eb7cccb9080ec853dcda6c37b86317df_darkgate_elex_hijackloader_remcos_shodi_wannacry
  • Size 512KB
  • Sample260801-xmdjsstgjc
  • SHA256 1e4669c4488566f5cec302489b8916c5ffcea965c2f6700c79cc116b3c04e030
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-08-01_eb7cccb9080ec853dcda6c37b86317df_darkgate_elex_hijackloader_remcos_shodi_wannacry
    • Size 512KB
    • SHA256 1e4669c4488566f5cec302489b8916c5ffcea965c2f6700c79cc116b3c04e030
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v16

Tasks