General

  • Target
    2026-08-09_467401a1457e4e1b9cb8e7164a24a4f0_darkgate_elex_floxif_glassworm_http-browser_maze_stealc
  • Size 26.7MB
  • Sample260809-gab77svwas
  • SHA256 701564898629a7e54f77638f148b026bc77dc492c370a139808736c5813e2c27
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10

Malware Config

Signatures

  • Codesign digest Mismatch 1 IoCs

    File was altered after it was signed.

File Explorer

  • 2026-08-09_467401a1457e4e1b9cb8e7164a24a4f0_darkgate_elex_floxif_glassworm_http-browser_maze_stealc
    .exe 26.7MB

2026-08-09_467401a1457e4e1b9cb8e7164a24a4f0_darkgate_elex_floxif_glassworm_http-browser_maze_stealc

  • IMPHASH 96ffba940a37b1a98cfb82bb8a0b051d
  • SHA256 701564898629a7e54f77638f148b026bc77dc492c370a139808736c5813e2c27
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Codesign digest Mismatch

    File was altered after it was signed.

PE Signature issue

Digest
e7:a7:df:0a:90:00:00:02:f0:62:47:7b:99:84:bf:c8:1d:0a:71:8b:8c:31:91:4f:8a:8a:ee:22:03:8a:51:01
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Signing Certificate
CN=Miray Software AG,O=Miray Software AG,POSTALCODE=81371,STREET=Gaissacher Str. 18,L=Muenchen,ST=Bavaria,C=DE

PE Signature issue

Digest
b9:ec:ec:5f:a3:3a:fa:a3:f9:ea:f9:c3:6f:32:7c:5f:fc:b0:c8:07
Digest Algorithm
sha1
PE Digests Matches
Not matched
Trusted
Signing Certificate
CN=Miray Software AG,O=Miray Software AG,POSTALCODE=81371,STREET=Gaissacher Str. 18,L=Muenchen,ST=Bavaria,C=DE
Minor OS version
1
Major OS version
5
Entry point
1653860
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_NET_RUN_FROM_SWAP
PDB paths
P:\dbg\_x86\choice.pdb