General

  • Target
    2026-08-17_bbfdc8f2d3bd7e7f161c116025055192_acrstealer_agent-tesla_darkgate_elex_gcleaner_glassworm_pony_trigona
  • Size 11.4MB
  • Sample260817-cbf6bs1ejf
  • SHA256 38a594c762ecff0964e059415ec3404a3b7c70b5b3296372f8a818a6a025a642
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10

Malware Config

Signatures

  • Detects executables containing common artifacts observed in infostealers 1 IoCs
  • Detects executables referencing many email and collaboration clients. Observed in information steale 1 IoCs
  • Detects executables referencing many file transfer clients. Observed in information stealers 1 IoCs
  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • 2026-08-17_bbfdc8f2d3bd7e7f161c116025055192_acrstealer_agent-tesla_darkgate_elex_gcleaner_glassworm_pony_trigona
    .exe 11.4MB

2026-08-17_bbfdc8f2d3bd7e7f161c116025055192_acrstealer_agent-tesla_darkgate_elex_gcleaner_glassworm_pony_trigona

  • IMPHASH dce464816ec7828c53830742f7e10faf
  • SHA256 38a594c762ecff0964e059415ec3404a3b7c70b5b3296372f8a818a6a025a642
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Detects executables containing common artifacts observed in infostealers

  • Detects executables referencing many email and collaboration clients. Observed in information steale

  • Detects executables referencing many file transfer clients. Observed in information stealers

  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest
d9:fb:27:7c:fc:82:bc:fb:e8:42:b2:a2:66:b8:44:3b:16:d8:b3:43
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=UpdateStar GmbH,O=UpdateStar GmbH,POSTALCODE=10827,STREET=Hauptstraße 20,L=Berlin,ST=Berlin,C=DE
Minor OS version
0
Major OS version
5
Entry point
8113828
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI
PDB paths