2026-08-08_e6b5339a209c65260cde630068eebded_darkgate_elex_manuscrypt_mespinoza_remcos

General

Target
2026-08-08_e6b5339a209c65260cde630068eebded_darkgate_elex_manuscrypt_mespinoza_remcos
Size 244KB
Sample260808-pwppesfl8s
SHA256 b0641638442771368ea3b45853fd1ce578f813cd5eec2d159ba7f44406e5c265
MD5 e6b5339a209c65260cde630068eebded
SHA1 8a90ee2c5e265932bea0a0d73181716bd8d42d38
SHA512 6c1f55aab65a3e1716eec0ab8a79de3cc863742d76fa46b57d675ab15fcd1b14716882f813dbbe7e2521806e9f788a3682044baff217a8fbeeac9cfbe98375b5
SSDEEP 3072:eczyZeyj+ii1dGmGJY+S4cTt4ek9u0rP89hChmddMfF8r:AZeGQtBk9u0rPst/MfFY
TLSH
T1AB34177B6FA08930CB7E2D3CCC9465B1173EEB911A13CF9F235802AB49219ACDD1D566
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-08_e6b5339a209c65260cde630068eebded_darkgate_elex_manuscrypt_mespinoza_remcos

File Explorer

2026-08-08_e6b5339a209c65260cde630068eebded_darkgate_elex_manuscrypt_mespinoza_remcos

.exe 244KB

2026-08-08_e6b5339a209c65260cde630068eebded_darkgate_elex_manuscrypt_mespinoza_remcos

SHA256 b0641638442771368ea3b45853fd1ce578f813cd5eec2d159ba7f44406e5c265
MD5 e6b5339a209c65260cde630068eebded
SHA1 8a90ee2c5e265932bea0a0d73181716bd8d42d38
SHA512 6c1f55aab65a3e1716eec0ab8a79de3cc863742d76fa46b57d675ab15fcd1b14716882f813dbbe7e2521806e9f788a3682044baff217a8fbeeac9cfbe98375b5
SSDEEP 3072:eczyZeyj+ii1dGmGJY+S4cTt4ek9u0rP89hChmddMfF8r:AZeGQtBk9u0rPst/MfFY
TLSH
T1AB34177B6FA08930CB7E2D3CCC9465B1173EEB911A13CF9F235802AB49219ACDD1D566
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

8707

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

49KB

Virtual Size

49KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

24KB

Virtual Size

24KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

2KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.gfids

Size

512B

Virtual Size

292B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

9B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

152KB

Virtual Size

152KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-08_e6b5339a209c65260cde630068eebded_darkgate_elex_manuscrypt_mespinoza_remcos

generic