General
- Target 2026-07-01_c61169acc3a59844982122b4c79a5252_elex_glassworm_mafia_remcos
- Size 1.2MB
- Sample260701-jj73cahs2n
- SHA256 0b4b77e573c0e72f4f25a756d6152b26761e2524da7fea52508155f29f473eb8
- MD5 c61169acc3a59844982122b4c79a5252
- SHA1 7728d32c56162ca2f43e21f231a2d8f7b48b0899
- SHA512 ad4a40f4eb7c119f999350a3e59db136f81a3b99647d12aa57f6eedfdd794e7763173bc5c1c3a7e349aae749540040c8607715149336db537b50fdeafa9dc043
- SSDEEP 24576:4hfDc6X3lQM3xr4cQFTj0OZeVJ2bz1YrBcuNP3e1MhO+xIF:zul13qcQFTIOZeJrB/Y
- TLSH T1AB45F01EBEF1C032C0634231DD6ED318A2B5A4B288264847BBDD671D2F715D39B29B67
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-01_c61169acc3a59844982122b4c79a5252_elex_glassworm_mafia_remcos.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-01_c61169acc3a59844982122b4c79a5252_elex_glassworm_mafia_remcos.exe
Resource
win11ltsc2024-20260629-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_c61169acc3a59844982122b4c79a5252_elex_glassworm_mafia_remcos
- Size 1.2MB
- SHA256 0b4b77e573c0e72f4f25a756d6152b26761e2524da7fea52508155f29f473eb8
- MD5 c61169acc3a59844982122b4c79a5252
- SHA1 7728d32c56162ca2f43e21f231a2d8f7b48b0899
- SHA512 ad4a40f4eb7c119f999350a3e59db136f81a3b99647d12aa57f6eedfdd794e7763173bc5c1c3a7e349aae749540040c8607715149336db537b50fdeafa9dc043
- SSDEEP 24576:4hfDc6X3lQM3xr4cQFTj0OZeVJ2bz1YrBcuNP3e1MhO+xIF:zul13qcQFTIOZeJrB/Y
- TLSH T1AB45F01EBEF1C032C0634231DD6ED318A2B5A4B288264847BBDD671D2F715D39B29B67
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1