General

  • Target
    2026-08-01_51dbe5e71d61d3f0a270f151e1104230_darkgate_elex_gcleaner_glassworm_helldown
  • Size 7.4MB
  • Sample260802-a38njs1clc
  • SHA256 1a111d3ef9b3c4432c0436b76e5e8939c6dbddbee7bdf630a25f06cc0b50f972
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • 2026-08-01_51dbe5e71d61d3f0a270f151e1104230_darkgate_elex_gcleaner_glassworm_helldown
    .exe 7.4MB

2026-08-01_51dbe5e71d61d3f0a270f151e1104230_darkgate_elex_gcleaner_glassworm_helldown

  • SHA256 1a111d3ef9b3c4432c0436b76e5e8939c6dbddbee7bdf630a25f06cc0b50f972
  • MD5 SHA1 SHA512 SSDEEP TLSH
Digest
15:52:fb:54:aa:d6:20:10:b8:7b:99:4e:f1:2d:cc:67:81:ee:84:c6:9b:45:57:1d:55:83:7e:f2:3b:1a:9e:c2
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=2023017896,CN=FastStone Corporation,O=FastStone Corporation,L=Calgary,ST=Alberta,C=CA,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#1307416c6265727461,1.3.6.1.4.1.311.60.2.1.3=#13024341
Minor OS version
0
Major OS version
4
Entry point
5272676
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI
PDB paths