General
- Target 2026-10-09_d7bab49d3478f5e31683f645b5145919_darkgate_elex_glassworm_maze_ramnit
- Size 1.1MB
- Sample261011-2772csba45
- SHA256 998233beeabb3cfe0032084db2a4cf8718f1860312f76d53eebbc61d8deb0584
- MD5 d7bab49d3478f5e31683f645b5145919
- SHA1 8a2c8daae2910153568756baff2962152620aa24
- SHA512 58c5481c44d46e6ef2f1d8d68fbe84e469aaa58193137895268d40b7bd64a33a2481032d8e322fa2fe06245feca3b17cbd20290289aaa240b829705e477497ac
- SSDEEP 12288:fg85Qmg3rHmGuDso9vquCSzV94MtF5qeQnGZ5A5t9ILaFKNTZOYs777fJ1yZx2qQ:Y85aO9lMyCnGrA5KaoOYOHuH70
- TLSH T1F545AE1176919132D27206719E3EAB3951BDBD751B308ACFE3C81E3D19705C2AA36B3B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-09_d7bab49d3478f5e31683f645b5145919_darkgate_elex_glassworm_maze_ramnit.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-09_d7bab49d3478f5e31683f645b5145919_darkgate_elex_glassworm_maze_ramnit
- Size 1.1MB
- SHA256 998233beeabb3cfe0032084db2a4cf8718f1860312f76d53eebbc61d8deb0584
- MD5 d7bab49d3478f5e31683f645b5145919
- SHA1 8a2c8daae2910153568756baff2962152620aa24
- SHA512 58c5481c44d46e6ef2f1d8d68fbe84e469aaa58193137895268d40b7bd64a33a2481032d8e322fa2fe06245feca3b17cbd20290289aaa240b829705e477497ac
- SSDEEP 12288:fg85Qmg3rHmGuDso9vquCSzV94MtF5qeQnGZ5A5t9ILaFKNTZOYs777fJ1yZx2qQ:Y85aO9lMyCnGrA5KaoOYOHuH70
- TLSH T1F545AE1176919132D27206719E3EAB3951BDBD751B308ACFE3C81E3D19705C2AA36B3B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.