General
- Target 2026-08-17_bbfdc8f2d3bd7e7f161c116025055192_acrstealer_agent-tesla_darkgate_elex_gcleaner_glassworm_pony_trigona
- Size 11.4MB
- Sample260817-cbf6bs1ejf
- SHA256 38a594c762ecff0964e059415ec3404a3b7c70b5b3296372f8a818a6a025a642
- MD5 bbfdc8f2d3bd7e7f161c116025055192
- SHA1 14f934481bbe5545f9ac478390bb97477d321005
- SHA512 535b1c88345d6f94a5e9079af1fccb1478d10226cc4c26d2d6ce97e7a86c336000065c10a319c5f1d56753507854fc407e4ca16c42e7e47315be2f1e887b614c
- SSDEEP 98304:vmgxxZUkA4P69bsdDo60VKSiaFrfynuNuwTgMyGD2zk8Zn6yvXvAgu:BxxmkAG69bsdDo3xq2bsMyGGk8Zn6Ln
- TLSH T1F3C68052B390C037C4A21A3ADD57DBF8A43E7D209E65994B3FA43E0C1F76941BC2619B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
4 signatures
Behavioral task
behavioral1
Sample
2026-08-17_bbfdc8f2d3bd7e7f161c116025055192_acrstealer_agent-tesla_darkgate_elex_gcleaner_glassworm_pony_trigona.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-17_bbfdc8f2d3bd7e7f161c116025055192_acrstealer_agent-tesla_darkgate_elex_gcleaner_glassworm_pony_trigona.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-17_bbfdc8f2d3bd7e7f161c116025055192_acrstealer_agent-tesla_darkgate_elex_gcleaner_glassworm_pony_trigona
- Size 11.4MB
- SHA256 38a594c762ecff0964e059415ec3404a3b7c70b5b3296372f8a818a6a025a642
- MD5 bbfdc8f2d3bd7e7f161c116025055192
- SHA1 14f934481bbe5545f9ac478390bb97477d321005
- SHA512 535b1c88345d6f94a5e9079af1fccb1478d10226cc4c26d2d6ce97e7a86c336000065c10a319c5f1d56753507854fc407e4ca16c42e7e47315be2f1e887b614c
- SSDEEP 98304:vmgxxZUkA4P69bsdDo60VKSiaFrfynuNuwTgMyGD2zk8Zn6yvXvAgu:BxxmkAG69bsdDo3xq2bsMyGGk8Zn6Ln
- TLSH T1F3C68052B390C037C4A21A3ADD57DBF8A43E7D209E65994B3FA43E0C1F76941BC2619B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing common artifacts observed in infostealers
-
Detects executables referencing many email and collaboration clients. Observed in information steale
-
Detects executables referencing many file transfer clients. Observed in information stealers