General
- Target 2026-08-07_f44e077071f5aeb58af088b2b2827816_acrstealer_amadey_darkgate_elex_gcleaner_glassworm_poet-rat_remcos_smoke-loader_stop
- Size 14.6MB
- Sample260807-kywtas1dma
- SHA256 7c9eb6f78081b276b6ddfe1e4d5ab6587d87e4fdc2d5b4b8109e0a693053345d
- MD5 f44e077071f5aeb58af088b2b2827816
- SHA1 20b1fd858b25b59a8d2001d443d2caaf6f51ee20
- SHA512 3180467b30f93e9078aae500520845c8267efbb987e302fc3ddf3d2a4ce81c2d914b11ffae449cd3f3d230e4d842cf86bf8ed430be8e9cec26370271bd4533cc
- SSDEEP 98304:+H5uiOjB2YUVbN+VeVtsFjf5V7sKCgvhiWaOuBulNk24mhC82AeJpKLdMl8K3z7K:AuCxVJ+8s97AK54Sjic4Nbaqg
- TLSH T1ADF6BF1372C5103BD0670A364927DAB4693B7E312A128CAB77FC2D8FBF359806926757
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-07_f44e077071f5aeb58af088b2b2827816_acrstealer_amadey_darkgate_elex_gcleaner_glassworm_poet-.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-07_f44e077071f5aeb58af088b2b2827816_acrstealer_amadey_darkgate_elex_gcleaner_glassworm_poet-.exe
Resource
win11ltsc2024-20260710-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_f44e077071f5aeb58af088b2b2827816_acrstealer_amadey_darkgate_elex_gcleaner_glassworm_poet-rat_remcos_smoke-loader_stop
- Size 14.6MB
- SHA256 7c9eb6f78081b276b6ddfe1e4d5ab6587d87e4fdc2d5b4b8109e0a693053345d
- MD5 f44e077071f5aeb58af088b2b2827816
- SHA1 20b1fd858b25b59a8d2001d443d2caaf6f51ee20
- SHA512 3180467b30f93e9078aae500520845c8267efbb987e302fc3ddf3d2a4ce81c2d914b11ffae449cd3f3d230e4d842cf86bf8ed430be8e9cec26370271bd4533cc
- SSDEEP 98304:+H5uiOjB2YUVbN+VeVtsFjf5V7sKCgvhiWaOuBulNk24mhC82AeJpKLdMl8K3z7K:AuCxVJ+8s97AK54Sjic4Nbaqg
- TLSH T1ADF6BF1372C5103BD0670A364927DAB4693B7E312A128CAB77FC2D8FBF359806926757
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Detects executables referencing many varying, potentially fake Windows User-Agents