General
- Target 2026-07-14_ad65a6dcd4fa522aae8388fc749f3cfb_elex_glassworm_mafia_remcos
- Size 1.2MB
- Sample260714-ds69hsds4p
- SHA256 532d15b9bb50d2e3648af79d7bf93dcbbe00d63231be3e04f1755df7639564b6
- MD5 ad65a6dcd4fa522aae8388fc749f3cfb
- SHA1 92502102c7dc34523ae21b392a348d51fe01f799
- SHA512 738bd21f8fc7718064a2748e365432161ead8d06f3fc0a2596098ee58a16e7467e2255e6b616adb7259a84578c95d9b003002f7c254d447341b94e940c2f1c9d
- SSDEEP 24576:YhfDc6X3lQMnxr4cQFTj0OZeVJIS0rA1V389Xuls1XTSv58s4Zwcu:Tul1nqcQFTIOZe1V38BXTSl4Z
- TLSH T17145F01ABEF1C032C1235230CD6ED358A1B5B4B258264847BBDD671D2FB05D3972ABA7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-14_ad65a6dcd4fa522aae8388fc749f3cfb_elex_glassworm_mafia_remcos.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-14_ad65a6dcd4fa522aae8388fc749f3cfb_elex_glassworm_mafia_remcos.exe
Resource
win11ltsc2024-20260709-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-14_ad65a6dcd4fa522aae8388fc749f3cfb_elex_glassworm_mafia_remcos
- Size 1.2MB
- SHA256 532d15b9bb50d2e3648af79d7bf93dcbbe00d63231be3e04f1755df7639564b6
- MD5 ad65a6dcd4fa522aae8388fc749f3cfb
- SHA1 92502102c7dc34523ae21b392a348d51fe01f799
- SHA512 738bd21f8fc7718064a2748e365432161ead8d06f3fc0a2596098ee58a16e7467e2255e6b616adb7259a84578c95d9b003002f7c254d447341b94e940c2f1c9d
- SSDEEP 24576:YhfDc6X3lQMnxr4cQFTj0OZeVJIS0rA1V389Xuls1XTSv58s4Zwcu:Tul1nqcQFTIOZe1V38BXTSl4Z
- TLSH T17145F01ABEF1C032C1235230CD6ED358A1B5B4B258264847BBDD671D2FB05D3972ABA7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1