General
- Target 2026-08-13_cb372a679822a420ddb71affdc160507_darkgate_elex_glassworm_hacktools_remcos_smoke-loader_stop
- Size 15.1MB
- Sample260813-j22chsdn3w
- SHA256 100a492b33ba2fddad4459ff0478abaaf3ab4d9af8f052b4943b855f5e0b04e1
- MD5 cb372a679822a420ddb71affdc160507
- SHA1 14ea726f0a471d52c27b5ef9e6104f1572c6bcd7
- SHA512 cb9b5b107616d96919678e3a63fc67508be3a03d591ae5c9ad97d269c9e1f374d6afbb9fed4576325931034ca963faf13079fe4fbcaeca65e6b2000f5a6ac375
- SSDEEP 393216:zlXqz0zjzEJsv6tWKFdu9C+VZkmcP1ByN+R:zlXqz0zjrA1BZR
- TLSH T14AF6E001EA8180B5D9DA21B611BF522AC777AFA14B2011DBA7DC6E0B5F30AD1ED73743
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-13_cb372a679822a420ddb71affdc160507_darkgate_elex_glassworm_hacktools_remcos_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-13_cb372a679822a420ddb71affdc160507_darkgate_elex_glassworm_hacktools_remcos_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-13_cb372a679822a420ddb71affdc160507_darkgate_elex_glassworm_hacktools_remcos_smoke-loader_stop
- Size 15.1MB
- SHA256 100a492b33ba2fddad4459ff0478abaaf3ab4d9af8f052b4943b855f5e0b04e1
- MD5 cb372a679822a420ddb71affdc160507
- SHA1 14ea726f0a471d52c27b5ef9e6104f1572c6bcd7
- SHA512 cb9b5b107616d96919678e3a63fc67508be3a03d591ae5c9ad97d269c9e1f374d6afbb9fed4576325931034ca963faf13079fe4fbcaeca65e6b2000f5a6ac375
- SSDEEP 393216:zlXqz0zjzEJsv6tWKFdu9C+VZkmcP1ByN+R:zlXqz0zjrA1BZR
- TLSH T14AF6E001EA8180B5D9DA21B611BF522AC777AFA14B2011DBA7DC6E0B5F30AD1ED73743
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.