General

  • Target
    2026-08-25_a2b586106664f3ce163a28910d0cff61_darkgate_elex_glassworm_mespinoza_remcos
  • Size 11.6MB
  • Sample260826-sdqqjsdh77
  • SHA256 159cecddfe9c55f900cfe937050dcf2e2f1751ce861dbb32111b46f07327f8ce
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • 2026-08-25_a2b586106664f3ce163a28910d0cff61_darkgate_elex_glassworm_mespinoza_remcos
    .exe 11.6MB

2026-08-25_a2b586106664f3ce163a28910d0cff61_darkgate_elex_glassworm_mespinoza_remcos

  • IMPHASH 807595375b5d15f3cd8fdda02d920d38
  • SHA256 159cecddfe9c55f900cfe937050dcf2e2f1751ce861dbb32111b46f07327f8ce
  • MD5 SHA1 SHA512 SSDEEP TLSH
Digest
cc:08:a4:90:0a:e8:9d:b5:30:b1:3e:70:f1:03:41:fb:ef:24:eb:01:19:28:55:93:4e:d2:c4:b7:65:42:71:57
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=91440400MA7FWRMCXK,CN=珠海市莫停之科技有限公司,O=珠海市莫停之科技有限公司,L=珠海市,ST=广东省,C=CN,1.3.6.1.4.1.311.60.2.1.1=#0c09e78fa0e6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.2=#0c09e5b9bfe4b89ce79c81,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Minor OS version
1
Major OS version
5
Entry point
875627
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE
PDB paths
G:\jekins_work\workspace\mtz_zip_build_newicon_v3\product\win32\dbginfo\wpmain.pdb