2026-11-11_9c8f8f47627a8ce22de27fd68dc0da6d_darkgate_elex_floxif_glassworm_remcos_stealc_stop
- IMPHASH 64f56057f3cd475ad6389c5b13af7a92
- SHA256 d81e21b8d827a666f756e32d49f20d98d1f25d124c8f4674a945d6e788738f37
-
Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers
-
Detects executables containing SQL queries to confidential data stores. Observed in infostealers
-
Codesign digest Mismatch
File was altered after it was signed.
PE Signature issue
generic
count=17, id=109, productName=VS2005 build 50727, version=50727,
count=15, id=123, productName=VS2005 build 50727, version=50727,
count=8, id=132, productName=VS2008 build 21022, version=21022,
count=766, id=1, productName=Unmarked objects,
count=14, id=150, version=20413,
count=45, id=149, productName=VS2008 SP1 build 30729, version=30729,
count=217, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=538, id=132, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,