General

  • Target
    2026-09-23_0766480843876a8133f2a9911574cc9b_darkgate_elex_glassworm_luca-stealer_mespinoza_njrat_remcos_revil_zxxz
  • Size 8.8MB
  • Sample260925-txeytsst6q
  • SHA256 6fcf8c07c7ef6f76077f20efe7343e98f70d44d975e1fdc34bcc23af089f60fb
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Insecure Codesign Algorithm 1 IoCs

    File was codesigned using an insecure algorithm.

File Explorer

  • 2026-09-23_0766480843876a8133f2a9911574cc9b_darkgate_elex_glassworm_luca-stealer_mespinoza_njrat_remcos_revil_zxxz
    .exe 8.8MB

2026-09-23_0766480843876a8133f2a9911574cc9b_darkgate_elex_glassworm_luca-stealer_mespinoza_njrat_remcos_revil_zxxz

  • IMPHASH 2fc19b21b0ba2ad142380ea23831f834
  • SHA256 6fcf8c07c7ef6f76077f20efe7343e98f70d44d975e1fdc34bcc23af089f60fb
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Insecure Codesign Algorithm

    File was codesigned using an insecure algorithm.

Digest
77:67:35:6c:14:79:85:04:16:ec:e9:61:f1:ce:21:e5:ac:be:f8:6d
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
CN=Grid Republic (COMPUTATIONAL CHARITY PROJECT INC),O=Grid Republic (COMPUTATIONAL CHARITY PROJECT INC),POSTALCODE=11205-4001,STREET=239 Carlton Ave,L=Brooklyn,ST=NY,C=US
Minor OS version
1
Major OS version
5
Entry point
5301771
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths
H:\Dropbox\webpages\charityengine\git\charityengine\project\http-proxy-client\tmp\nexe\nodejs\5.8.0\node-v5.8.0\Release\node.pdb