General
- Target 2026-07-08_d550d15bf98d8921dc1da4ec23f9528f_darkgate_elex_glassworm_mafia_remcos
- Size 1.5MB
- Sample260708-eq79gabs6q
- SHA256 3656f3768e17b0b09956194f9fe0f75298e38acb0ae8f6a0b76b9e9a044a20a2
- MD5 d550d15bf98d8921dc1da4ec23f9528f
- SHA1 30875b503a5b2614b5340f83f2c0d972f51f4a7b
- SHA512 d3ac62c54c8466b79e668fe56989674761a49df8669181e24b91c088f0d9351e2d521d6c0a26fb9b0fd34bf4ce57057e086251c679150d7c07d28275bb2c4f67
- SSDEEP 24576:ivrHWdZcy2uw7We9yQHzLkTMV87BbkjCMvGdLtSXKEFG1rDHmj7dip:2s4rYQTwTb7mGVtSXKEFuDHchip
- TLSH T14975AE1277E58035F1B36731A93A931499BAFCB29839840E73DC662D1FB06918E74B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-08_d550d15bf98d8921dc1da4ec23f9528f_darkgate_elex_glassworm_mafia_remcos.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_d550d15bf98d8921dc1da4ec23f9528f_darkgate_elex_glassworm_mafia_remcos
- Size 1.5MB
- SHA256 3656f3768e17b0b09956194f9fe0f75298e38acb0ae8f6a0b76b9e9a044a20a2
- MD5 d550d15bf98d8921dc1da4ec23f9528f
- SHA1 30875b503a5b2614b5340f83f2c0d972f51f4a7b
- SHA512 d3ac62c54c8466b79e668fe56989674761a49df8669181e24b91c088f0d9351e2d521d6c0a26fb9b0fd34bf4ce57057e086251c679150d7c07d28275bb2c4f67
- SSDEEP 24576:ivrHWdZcy2uw7We9yQHzLkTMV87BbkjCMvGdLtSXKEFG1rDHmj7dip:2s4rYQTwTb7mGVtSXKEFuDHchip
- TLSH T14975AE1277E58035F1B36731A93A931499BAFCB29839840E73DC662D1FB06918E74B73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1