General
- Target 2026-08-20_de921f61913c7a7c00dd0fb3b19a9c0d_darkgate_elex_glassworm_luca-stealer_magniber_medusalocker_mespinoza_njrat_remcos
- Size 5.6MB
- Sample260820-nb8fcsyvhs
- SHA256 68aede89d8a1716cd659c44044a72e85cc9c492aadc6ce49085d760abdfda7ba
- MD5 de921f61913c7a7c00dd0fb3b19a9c0d
- SHA1 0558d23260bbd74dfe25152073a8e6c76e473a7b
- SHA512 0fd354396296c79fdf8b2fb79dc9c995b7919ed95a15a39974c1af582834e7f489ccd0c8adc37d562fa27a42b9de1a9234895731c5380da92e68ccf4b5e030ac
- SSDEEP 49152:5kCv9MKZQttyVQBG5PVOvx+iig9w4qQv6zJ/TeJH0a0BihL67Sy5BpNTVb6SEiJN:reXttyVhPVMn0aHE6HLjY
- TLSH T18C46E642A2E944A4F1F32B75AE3619714A77BD115F38C88FA58CAC1D0BF3681D530B6B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-20_de921f61913c7a7c00dd0fb3b19a9c0d_darkgate_elex_glassworm_luca-stealer_magniber_medusalock.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_de921f61913c7a7c00dd0fb3b19a9c0d_darkgate_elex_glassworm_luca-stealer_magniber_medusalocker_mespinoza_njrat_remcos
- Size 5.6MB
- SHA256 68aede89d8a1716cd659c44044a72e85cc9c492aadc6ce49085d760abdfda7ba
- MD5 de921f61913c7a7c00dd0fb3b19a9c0d
- SHA1 0558d23260bbd74dfe25152073a8e6c76e473a7b
- SHA512 0fd354396296c79fdf8b2fb79dc9c995b7919ed95a15a39974c1af582834e7f489ccd0c8adc37d562fa27a42b9de1a9234895731c5380da92e68ccf4b5e030ac
- SSDEEP 49152:5kCv9MKZQttyVQBG5PVOvx+iig9w4qQv6zJ/TeJH0a0BihL67Sy5BpNTVb6SEiJN:reXttyVhPVMn0aHE6HLjY
- TLSH T18C46E642A2E944A4F1F32B75AE3619714A77BD115F38C88FA58CAC1D0BF3681D530B6B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1