General
- Target 2026-07-04_46591fd8b5be6b650bd1b584ec89c04d_darkgate_elex_glassworm_mafia_remcos
- Size 1.5MB
- Sample260704-xp8sqact6s
- SHA256 c67af534a4ca29ad7daab8667da45ef0f44155f595e006ea8f56fb79c6bca820
- MD5 46591fd8b5be6b650bd1b584ec89c04d
- SHA1 fa27f78aa72761197c2311eba6c619da85ef55b4
- SHA512 65dd9016381faed682bd0df80e3a2677e484f9b9ae02198c1490a7e9fb222f1be8bca0df27da821ec0f556924b3cbe20b4d45c9be600e15f7620a9dd12080e32
- SSDEEP 24576:ivrHWdZcy2TbqWNzCQHzWRTMV87BbkjCMvGdLtC8nYHR4wVhOLRQg1pBeNL:2s/EmQTOTb7mGVtCGIR4wMRQg0L
- TLSH T1D475AD2237E58035F2B36731993A931459BABCB29839840E73DC666D2F70691CE74B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-04_46591fd8b5be6b650bd1b584ec89c04d_darkgate_elex_glassworm_mafia_remcos.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-04_46591fd8b5be6b650bd1b584ec89c04d_darkgate_elex_glassworm_mafia_remcos
- Size 1.5MB
- SHA256 c67af534a4ca29ad7daab8667da45ef0f44155f595e006ea8f56fb79c6bca820
- MD5 46591fd8b5be6b650bd1b584ec89c04d
- SHA1 fa27f78aa72761197c2311eba6c619da85ef55b4
- SHA512 65dd9016381faed682bd0df80e3a2677e484f9b9ae02198c1490a7e9fb222f1be8bca0df27da821ec0f556924b3cbe20b4d45c9be600e15f7620a9dd12080e32
- SSDEEP 24576:ivrHWdZcy2TbqWNzCQHzWRTMV87BbkjCMvGdLtC8nYHR4wVhOLRQg1pBeNL:2s/EmQTOTb7mGVtCGIR4wMRQg0L
- TLSH T1D475AD2237E58035F2B36731993A931459BABCB29839840E73DC666D2F70691CE74B73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1