General
- Target 2026-07-01_5662611bf00074801ba33c64fa5fdf58_darkgate_elex_glassworm_mafia_remcos
- Size 1.5MB
- Sample260701-lses9say8m
- SHA256 c75bc8e3e0a476744cac7605d0948980e6b23797e80ae7313116b341c87340ec
- MD5 5662611bf00074801ba33c64fa5fdf58
- SHA1 836b828cbfb65511bf1a076c6d10c7bf6e71f5a0
- SHA512 ff6534e16b96c67dcb77351fefedb00cd7a97e591615f481b63404ba55cb1ce7a1e978bcab29c159be0b40267bbbc62f4fc31e7e277cd84c8704af354e40911b
- SSDEEP 24576:ivrHWdZcy2D4qWHdqQHzqiTMV87BbkjCMvGdLtBbz1YrBcuNP3e1MhO+xIF:2sMygQTFTb7mGVtsrB/Y
- TLSH T10975AD1237E98035F1B36731993A93145A7ABCB29839840E73DC666D6F70A91CE74B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-01_5662611bf00074801ba33c64fa5fdf58_darkgate_elex_glassworm_mafia_remcos.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_5662611bf00074801ba33c64fa5fdf58_darkgate_elex_glassworm_mafia_remcos
- Size 1.5MB
- SHA256 c75bc8e3e0a476744cac7605d0948980e6b23797e80ae7313116b341c87340ec
- MD5 5662611bf00074801ba33c64fa5fdf58
- SHA1 836b828cbfb65511bf1a076c6d10c7bf6e71f5a0
- SHA512 ff6534e16b96c67dcb77351fefedb00cd7a97e591615f481b63404ba55cb1ce7a1e978bcab29c159be0b40267bbbc62f4fc31e7e277cd84c8704af354e40911b
- SSDEEP 24576:ivrHWdZcy2D4qWHdqQHzqiTMV87BbkjCMvGdLtBbz1YrBcuNP3e1MhO+xIF:2sMygQTFTb7mGVtsrB/Y
- TLSH T10975AD1237E98035F1B36731993A93145A7ABCB29839840E73DC666D6F70A91CE74B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Executes dropped EXE
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1