General
- Target 2026-08-08_586f738c268ddfbfed6f74706e4e89d2_darkgate_elex_glassworm_luca-stealer_magniber_mespinoza_njrat_remcos
- Size 1.3MB
- Sample260808-nzhvlsdd26
- SHA256 b21024d10b3f176ee3fb085cfec105c15070e9ea34b7adee183e7fbe9b61c000
- MD5 586f738c268ddfbfed6f74706e4e89d2
- SHA1 488b42997ca70136cf272e98ae7e9def723d0e48
- SHA512 a2dabc8bfc3506f2cbc6afffd0d019baf0a90bf26245a7f91ee49787a2feb77d1b64b97b049eac6045a2783b1813d8f846db575017203666ac411514c23d7976
- SSDEEP 24576:/dGxIoI6YVtv1tCjIk0LPTz0rUAfLsqjnhMgeiCl7G0nehbGZpbD:hoc1tyIfPTz0AAf/Dmg27RnWGj
- TLSH T14055CF217647D13BE4B205F049BCAA6B642EBC180F749ADBF3D81B2D29705C15F32B66
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_586f738c268ddfbfed6f74706e4e89d2_darkgate_elex_glassworm_luca-stealer_magniber_mespinoza_njrat_remcos.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_586f738c268ddfbfed6f74706e4e89d2_darkgate_elex_glassworm_luca-stealer_magniber_mespinoza_njrat_remcos.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_586f738c268ddfbfed6f74706e4e89d2_darkgate_elex_glassworm_luca-stealer_magniber_mespinoza_njrat_remcos
- Size 1.3MB
- SHA256 b21024d10b3f176ee3fb085cfec105c15070e9ea34b7adee183e7fbe9b61c000
- MD5 586f738c268ddfbfed6f74706e4e89d2
- SHA1 488b42997ca70136cf272e98ae7e9def723d0e48
- SHA512 a2dabc8bfc3506f2cbc6afffd0d019baf0a90bf26245a7f91ee49787a2feb77d1b64b97b049eac6045a2783b1813d8f846db575017203666ac411514c23d7976
- SSDEEP 24576:/dGxIoI6YVtv1tCjIk0LPTz0rUAfLsqjnhMgeiCl7G0nehbGZpbD:hoc1tyIfPTz0AAf/Dmg27RnWGj
- TLSH T14055CF217647D13BE4B205F049BCAA6B642EBC180F749ADBF3D81B2D29705C15F32B66
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1