General
- Target 2026-07-05_7da8876ef24d4cf5ea5c8384e45e8a28_darkgate_elex_glassworm_mafia_remcos
- Size 1.5MB
- Sample260705-bvkgesby4l
- SHA256 f96f86c48cf44ab08f1b8dc8870320e5232ed2599fe0383873a9b6e05591210a
- MD5 7da8876ef24d4cf5ea5c8384e45e8a28
- SHA1 d5ad5de2972cfa3dde3bb17b15c6d51c5d8445c1
- SHA512 f4992e08c9c5c25f00e67536bb49f4131745f25ed02d7dfeecfefdfc24d99fd90190c95daf874a0c3265f17f7c608dd54d8a36e404a2d507c1b5310044145e43
- SSDEEP 24576:ivrHWdZcy2TbqWbzCQHzWvTMV87BbkjCMvGdLtzKqcFqQrJEerUxbA0gKuKN:2s/mmQTYTb7mGVtzsFzrJLUBA7zK
- TLSH T14275AD2237E58035F1B36731993A932459BABCB29839840E73DC666D2F70691CE74B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-05_7da8876ef24d4cf5ea5c8384e45e8a28_darkgate_elex_glassworm_mafia_remcos.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-05_7da8876ef24d4cf5ea5c8384e45e8a28_darkgate_elex_glassworm_mafia_remcos
- Size 1.5MB
- SHA256 f96f86c48cf44ab08f1b8dc8870320e5232ed2599fe0383873a9b6e05591210a
- MD5 7da8876ef24d4cf5ea5c8384e45e8a28
- SHA1 d5ad5de2972cfa3dde3bb17b15c6d51c5d8445c1
- SHA512 f4992e08c9c5c25f00e67536bb49f4131745f25ed02d7dfeecfefdfc24d99fd90190c95daf874a0c3265f17f7c608dd54d8a36e404a2d507c1b5310044145e43
- SSDEEP 24576:ivrHWdZcy2TbqWbzCQHzWvTMV87BbkjCMvGdLtzKqcFqQrJEerUxbA0gKuKN:2s/mmQTYTb7mGVtzsFzrJLUBA7zK
- TLSH T14275AD2237E58035F1B36731993A932459BABCB29839840E73DC666D2F70691CE74B73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1