General
- Target 2026-07-14_46812776f45c6eff52d02a1faad8d061_darkgate_elex_glassworm_mafia_remcos
- Size 1.5MB
- Sample260714-el7gdady9p
- SHA256 0581fd6c68bb8b9f7521c85014d40b627cb87a3b16204101012d014f8d34ca41
- MD5 46812776f45c6eff52d02a1faad8d061
- SHA1 17bdc2f491ddd64d2fadfe95a6f18db03ea059df
- SHA512 c425f78ed5087afdaadb79c79d8d7ac4d2d98dac3f531ee1a07b4c44f121834cfeb35339c87f8b8ac7afb094923be92bc455a6ede5a375020f3e78c8d90f186d
- SSDEEP 24576:yvrHWdZcy2s8DWXrIQHz4nTMV87BbkjCMvGdLtTS0rA1V389Xuls1XTSv58s4ZwJ:ms6ScQTuTb7mGVtaV38BXTSl4Z
- TLSH T11175AD1277E58035F2B36731993A931499BABCB29839C40E73DC662D2F70691CE64B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-14_46812776f45c6eff52d02a1faad8d061_darkgate_elex_glassworm_mafia_remcos.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-14_46812776f45c6eff52d02a1faad8d061_darkgate_elex_glassworm_mafia_remcos
- Size 1.5MB
- SHA256 0581fd6c68bb8b9f7521c85014d40b627cb87a3b16204101012d014f8d34ca41
- MD5 46812776f45c6eff52d02a1faad8d061
- SHA1 17bdc2f491ddd64d2fadfe95a6f18db03ea059df
- SHA512 c425f78ed5087afdaadb79c79d8d7ac4d2d98dac3f531ee1a07b4c44f121834cfeb35339c87f8b8ac7afb094923be92bc455a6ede5a375020f3e78c8d90f186d
- SSDEEP 24576:yvrHWdZcy2s8DWXrIQHz4nTMV87BbkjCMvGdLtTS0rA1V389Xuls1XTSv58s4ZwJ:ms6ScQTuTb7mGVtaV38BXTSl4Z
- TLSH T11175AD1277E58035F2B36731993A931499BABCB29839C40E73DC662D2F70691CE64B73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1