General
- Target 2026-08-10_df4f36f7fe1420d88003961e67f36f10_darkgate_elex_glassworm_luca-stealer_medusalocker_njrat_remcos
- Size 996KB
- Sample260810-qf8b9sgd22
- SHA256 19b35071cfaaa96eb8619b43ec3746fa3ae8448ff2195873f2b09f75e4f05139
- MD5 df4f36f7fe1420d88003961e67f36f10
- SHA1 ab79567ebd4cfbf103d7b6a079e013fba3d53155
- SHA512 8412427218a3d9a602f6dd024b2b2a1abeb46f4a7f1bc29cb6a3114edcfd44f1da2fdb66a7eb19a474a32acf3c237b7ef0b5837d72820249509ef3080c2d2d0e
- SSDEEP 24576:Ek2SGP2LLKUvCQaS/RyGpe9lRFyWlWYDF9dZXRDNePC7FDYNE:VGP2LLKUvCQaSp1mlRllDjy0
- TLSH T1A2259D2676E2803AE6B307314D39A29416BFB9315E32CB6F23C8161D5F74651AF21B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-10_df4f36f7fe1420d88003961e67f36f10_darkgate_elex_glassworm_luca-stealer_medusalocker_njrat_remcos.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_df4f36f7fe1420d88003961e67f36f10_darkgate_elex_glassworm_luca-stealer_medusalocker_njrat_remcos.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_df4f36f7fe1420d88003961e67f36f10_darkgate_elex_glassworm_luca-stealer_medusalocker_njrat_remcos
- Size 996KB
- SHA256 19b35071cfaaa96eb8619b43ec3746fa3ae8448ff2195873f2b09f75e4f05139
- MD5 df4f36f7fe1420d88003961e67f36f10
- SHA1 ab79567ebd4cfbf103d7b6a079e013fba3d53155
- SHA512 8412427218a3d9a602f6dd024b2b2a1abeb46f4a7f1bc29cb6a3114edcfd44f1da2fdb66a7eb19a474a32acf3c237b7ef0b5837d72820249509ef3080c2d2d0e
- SSDEEP 24576:Ek2SGP2LLKUvCQaS/RyGpe9lRFyWlWYDF9dZXRDNePC7FDYNE:VGP2LLKUvCQaSp1mlRllDjy0
- TLSH T1A2259D2676E2803AE6B307314D39A29416BFB9315E32CB6F23C8161D5F74651AF21B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE