General
- Target 2026-08-18_18ade3ca4d696f0b28a6f3b61d86f150_acrstealer_darkgate_elex_gcleaner_glassworm_redline-stealer_stop
- Size 38.5MB
- Sample260819-aepkrsca95
- SHA256 4ad80d89af3a026c1ac000b5f75a5f42781b79dcf7427614f5480620cba37ad7
- MD5 18ade3ca4d696f0b28a6f3b61d86f150
- SHA1 c2ee100645861de268960b16930e0f9bc0bef0dd
- SHA512 afbb149c9ad854ebe4f5824c1b2215523e7e35bf1cbb23d37751ae947637c32ffee2e0f32893af024a036929ad12c24b5210d439c546ed1f8bc36ee067186dff
- SSDEEP 393216:vxgo5vpuHsk9gPv0v8Jex3pMDmuma9D68a9D6QaO6i6:vdv2sk9Cv0v8Il88
- TLSH T1E3977B43B6048C79C199073A055B9630AF366C2B5F936357AA8A777C3DBA3D00E73A47
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-18_18ade3ca4d696f0b28a6f3b61d86f150_acrstealer_darkgate_elex_gcleaner_glassworm_redline-stealer_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-18_18ade3ca4d696f0b28a6f3b61d86f150_acrstealer_darkgate_elex_gcleaner_glassworm_redline-stealer_stop.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-18_18ade3ca4d696f0b28a6f3b61d86f150_acrstealer_darkgate_elex_gcleaner_glassworm_redline-stealer_stop
- Size 38.5MB
- SHA256 4ad80d89af3a026c1ac000b5f75a5f42781b79dcf7427614f5480620cba37ad7
- MD5 18ade3ca4d696f0b28a6f3b61d86f150
- SHA1 c2ee100645861de268960b16930e0f9bc0bef0dd
- SHA512 afbb149c9ad854ebe4f5824c1b2215523e7e35bf1cbb23d37751ae947637c32ffee2e0f32893af024a036929ad12c24b5210d439c546ed1f8bc36ee067186dff
- SSDEEP 393216:vxgo5vpuHsk9gPv0v8Jex3pMDmuma9D68a9D6QaO6i6:vdv2sk9Cv0v8Il88
- TLSH T1E3977B43B6048C79C199073A055B9630AF366C2B5F936357AA8A777C3DBA3D00E73A47
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
AutoIT Executable
AutoIT scripts compiled to PE executables.