General
- Target 2026-08-13_1b3b256f2b02067af7935d92e9cfb51e_darkgate_elex_glassworm_hacktools_remcos_smoke-loader_stop
- Size 15.1MB
- Sample260813-mfsd9sab74
- SHA256 69564fa10718be41cf692e145151eec026d60f6f323f0b674f76eea7c20d6d03
- MD5 1b3b256f2b02067af7935d92e9cfb51e
- SHA1 e532ece919ba6fb7a54e99808b9cc43b13fef3ea
- SHA512 5af8c030553743ea35635bc3f2ebe473757048300ae66ee9d063503a8e4528a461a67447452caf6a8df6eedece0fa811e5a3350c6e87c66bfa07eeb1dc8e4542
- SSDEEP 393216:nlXqz0zjzEJsv6tWKFdu9C+VZkmcP1ByN+R:nlXqz0zjrA1BZR
- TLSH T140F6E001EA8180B5D9DA21B611BF522AC777AFA14B2011DBA7DC6E0B5F30AD1ED73743
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-13_1b3b256f2b02067af7935d92e9cfb51e_darkgate_elex_glassworm_hacktools_remcos_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-13_1b3b256f2b02067af7935d92e9cfb51e_darkgate_elex_glassworm_hacktools_remcos_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-13_1b3b256f2b02067af7935d92e9cfb51e_darkgate_elex_glassworm_hacktools_remcos_smoke-loader_stop
- Size 15.1MB
- SHA256 69564fa10718be41cf692e145151eec026d60f6f323f0b674f76eea7c20d6d03
- MD5 1b3b256f2b02067af7935d92e9cfb51e
- SHA1 e532ece919ba6fb7a54e99808b9cc43b13fef3ea
- SHA512 5af8c030553743ea35635bc3f2ebe473757048300ae66ee9d063503a8e4528a461a67447452caf6a8df6eedece0fa811e5a3350c6e87c66bfa07eeb1dc8e4542
- SSDEEP 393216:nlXqz0zjzEJsv6tWKFdu9C+VZkmcP1ByN+R:nlXqz0zjrA1BZR
- TLSH T140F6E001EA8180B5D9DA21B611BF522AC777AFA14B2011DBA7DC6E0B5F30AD1ED73743
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.