General

  • Target
    2026-08-08_520c6d58bc9c3952516f75b7650da220_bkransomware_darkgate_elex_glassworm_remcos
  • Size 21.4MB
  • Sample260808-hvy35ssdmf
  • SHA256 a5bc702c79335e16a0f4a02141184203a3cfd726defd8a70efc53abc13899d3c
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • 2026-08-08_520c6d58bc9c3952516f75b7650da220_bkransomware_darkgate_elex_glassworm_remcos
    .exe 21.4MB

2026-08-08_520c6d58bc9c3952516f75b7650da220_bkransomware_darkgate_elex_glassworm_remcos

  • IMPHASH 74992b4d62c4b1604e9599d9bd015672
  • SHA256 a5bc702c79335e16a0f4a02141184203a3cfd726defd8a70efc53abc13899d3c
  • MD5 SHA1 SHA512 SSDEEP TLSH
Digest
36:15:b2:93:95:39:8d:7b:f9:06:b6:13:99:eb:5c:b9:bc:24:a9:10:7b:ad:1a:d8:27:ca:14:e0:cc:f6:7e:ca
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=CHE-113.666.835,CN=Acronis International GmbH,O=Acronis International GmbH,L=Schaffhausen,C=CH,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130c53636861666668617573656e,1.3.6.1.4.1.311.60.2.1.3=#13024348
Minor OS version
1
Major OS version
5
Entry point
7996764
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE
PDB paths
c:\b\2071\exe\vs\release\multi\standard\ab_web_installer_enterprise.pdb