General
- Target 2026-08-19_e9655027367e3b6193a08012fdd49e6a_acrstealer_darkgate_elex_gcleaner_glassworm_remcos_trigona
- Size 40.9MB
- Sample260819-jlrhdazbpc
- SHA256 e455f06eb7bf9108c61ef5fb0a0b86a020b7a58f63ac88d1d51f97497462cc0d
- MD5 e9655027367e3b6193a08012fdd49e6a
- SHA1 50efd0e21545326981be731e8b27feaf8025df4c
- SHA512 97a03b4c1b6cf8f7986d96052a1dd5f39d25eed33c6e8cbc8cffb07aaa165850975e603d847eb7d8529e830e92555e4e700752fefab7fe76838293f7e591a755
- SSDEEP 393216:g2kuSrYXnSWUvSD/o0Cbxwl4uhGOOioYVb9JMuu6YwpFe32hd:wSUKD/otWl4qGOOi9Vz26Y8g32hd
- TLSH T17297AF32F1548F75C0DF1A3E448B93119332410B5767DB4602E8A979AF9E7A02F7A78E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-19_e9655027367e3b6193a08012fdd49e6a_acrstealer_darkgate_elex_gcleaner_glassworm_remcos_trigona.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-19_e9655027367e3b6193a08012fdd49e6a_acrstealer_darkgate_elex_gcleaner_glassworm_remcos_trigona.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_e9655027367e3b6193a08012fdd49e6a_acrstealer_darkgate_elex_gcleaner_glassworm_remcos_trigona
- Size 40.9MB
- SHA256 e455f06eb7bf9108c61ef5fb0a0b86a020b7a58f63ac88d1d51f97497462cc0d
- MD5 e9655027367e3b6193a08012fdd49e6a
- SHA1 50efd0e21545326981be731e8b27feaf8025df4c
- SHA512 97a03b4c1b6cf8f7986d96052a1dd5f39d25eed33c6e8cbc8cffb07aaa165850975e603d847eb7d8529e830e92555e4e700752fefab7fe76838293f7e591a755
- SSDEEP 393216:g2kuSrYXnSWUvSD/o0Cbxwl4uhGOOioYVb9JMuu6YwpFe32hd:wSUKD/otWl4qGOOi9Vz26Y8g32hd
- TLSH T17297AF32F1548F75C0DF1A3E448B93119332410B5767DB4602E8A979AF9E7A02F7A78E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.