General
- Target 2026-08-09_707ff1e58f88bb5be2cc4deeb940ddb9_darkgate_elex_glassworm_luca-stealer_mespinoza_njrat_remcos
- Size 1.7MB
- Sample260809-m8enwadr5s
- SHA256 cc718ec1d11e92c6b2f5332e32f7c770131a288a07f288e0273c5adcf2469a46
- MD5 707ff1e58f88bb5be2cc4deeb940ddb9
- SHA1 f2437805a983d26671dc0f7ea2b4282c939849ac
- SHA512 3144c04dcc0e489257eabe6828ae25bb7992c24a5a00a86d919b5a8c8199d0ae2650f68128958582653ca4ba4b87b20d50dc0154d6d6d95703f9abe387529eb9
- SSDEEP 12288:NWl7hT4DXJFWKZaaLq2njmtv8TN5TkDM1nNu5j1ZEfkqF544Hhf7Trz:0l7iFWKZaObCtv8TN5TK4t48f7Trz
- TLSH T18F85820BA6F9C114F5B2A770DAB582F5197B7E40DB38C5CF524A3C5C3478AB0AA20767
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-09_707ff1e58f88bb5be2cc4deeb940ddb9_darkgate_elex_glassworm_luca-stealer_mespinoza_njrat_remcos.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_707ff1e58f88bb5be2cc4deeb940ddb9_darkgate_elex_glassworm_luca-stealer_mespinoza_njrat_remcos.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_707ff1e58f88bb5be2cc4deeb940ddb9_darkgate_elex_glassworm_luca-stealer_mespinoza_njrat_remcos
- Size 1.7MB
- SHA256 cc718ec1d11e92c6b2f5332e32f7c770131a288a07f288e0273c5adcf2469a46
- MD5 707ff1e58f88bb5be2cc4deeb940ddb9
- SHA1 f2437805a983d26671dc0f7ea2b4282c939849ac
- SHA512 3144c04dcc0e489257eabe6828ae25bb7992c24a5a00a86d919b5a8c8199d0ae2650f68128958582653ca4ba4b87b20d50dc0154d6d6d95703f9abe387529eb9
- SSDEEP 12288:NWl7hT4DXJFWKZaaLq2njmtv8TN5TkDM1nNu5j1ZEfkqF544Hhf7Trz:0l7iFWKZaObCtv8TN5TK4t48f7Trz
- TLSH T18F85820BA6F9C114F5B2A770DAB582F5197B7E40DB38C5CF524A3C5C3478AB0AA20767
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects MetaQuotes adware
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.