General
- Target 2026-09-10_ae3c6168efe41287846e3d6d4a6cdc8a_acrstealer_amadey_darkgate_elex_gcleaner_glassworm_remcos_trigona
- Size 23.6MB
- Sample260910-pbecyswwcx
- SHA256 223df1367c4f99bf3ae58b8d01b747d2270b458b5af67243eb84cf66e9210f95
- MD5 ae3c6168efe41287846e3d6d4a6cdc8a
- SHA1 55f2590b41803921d25d07468094cc1cd9b58785
- SHA512 1573038f8f7c5f7b0a50af2f12e4a9397b8117b719acdd488009c5634d9f1ed5f0f2ba59647006e4d7b441fb30c5174db78281dd5200134e8c46e005acc5266e
- SSDEEP 393216:RcE68H9QW500RDvWoQe7odPEpkjSrY+jLILPf/xe8sq1oWW19x7y:KEfr1Wh+jLILP3x5k9k
- TLSH T173475E2272C9A03DF0736E324DA9D5E5993B7E712E118C4B37E43B0D5F36A40BD26626
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-10_ae3c6168efe41287846e3d6d4a6cdc8a_acrstealer_amadey_darkgate_elex_gcleaner_glassworm_remcos_trigona.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-10_ae3c6168efe41287846e3d6d4a6cdc8a_acrstealer_amadey_darkgate_elex_gcleaner_glassworm_remcos_trigona.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-10_ae3c6168efe41287846e3d6d4a6cdc8a_acrstealer_amadey_darkgate_elex_gcleaner_glassworm_remcos_trigona
- Size 23.6MB
- SHA256 223df1367c4f99bf3ae58b8d01b747d2270b458b5af67243eb84cf66e9210f95
- MD5 ae3c6168efe41287846e3d6d4a6cdc8a
- SHA1 55f2590b41803921d25d07468094cc1cd9b58785
- SHA512 1573038f8f7c5f7b0a50af2f12e4a9397b8117b719acdd488009c5634d9f1ed5f0f2ba59647006e4d7b441fb30c5174db78281dd5200134e8c46e005acc5266e
- SSDEEP 393216:RcE68H9QW500RDvWoQe7odPEpkjSrY+jLILPf/xe8sq1oWW19x7y:KEfr1Wh+jLILP3x5k9k
- TLSH T173475E2272C9A03DF0736E324DA9D5E5993B7E712E118C4B37E43B0D5F36A40BD26626
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
2PowerShell
1Windows Command Shell
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1