General
- Target 2026-07-12_5081530facdea1078e34f324a2588cd7_darkgate_elex_glassworm_mafia_remcos
- Size 1.5MB
- Sample260712-qjxpyaav9m
- SHA256 f53f7d0fbf5743e3ab0bb3e65f23e8128133fe01a3043c62feb7ad66f2228174
- MD5 5081530facdea1078e34f324a2588cd7
- SHA1 9e568c89323d6798015f114c431099fb32df143b
- SHA512 a3c061e0e36a06dbf3841bca55755089f590c39fb13e2f6c9a8e786d62115a17a7a652703f642a081e79cfbda6c42c957add4c3dc8b4a2b1ed4287b2e2d59dd0
- SSDEEP 24576:ivrHWdZcy2uKrWonyQHzLMTMV87BbkjCMvGdLt6MLhQWL4hRCEYQYKu168meTAkW:2sylyQTITb7mGVtFL3L4hJZeVu5
- TLSH T12D75AD2277E58035F1B36731A93A931459BABCB29839840E73DC662D2F70691CE74B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-12_5081530facdea1078e34f324a2588cd7_darkgate_elex_glassworm_mafia_remcos.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-12_5081530facdea1078e34f324a2588cd7_darkgate_elex_glassworm_mafia_remcos
- Size 1.5MB
- SHA256 f53f7d0fbf5743e3ab0bb3e65f23e8128133fe01a3043c62feb7ad66f2228174
- MD5 5081530facdea1078e34f324a2588cd7
- SHA1 9e568c89323d6798015f114c431099fb32df143b
- SHA512 a3c061e0e36a06dbf3841bca55755089f590c39fb13e2f6c9a8e786d62115a17a7a652703f642a081e79cfbda6c42c957add4c3dc8b4a2b1ed4287b2e2d59dd0
- SSDEEP 24576:ivrHWdZcy2uKrWonyQHzLMTMV87BbkjCMvGdLt6MLhQWL4hRCEYQYKu168meTAkW:2sylyQTITb7mGVtFL3L4hJZeVu5
- TLSH T12D75AD2277E58035F1B36731A93A931459BABCB29839840E73DC662D2F70691CE74B73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1