General
- Target 2026-07-14_2c39020b66fccdcefdf12939a5c33c92_darkgate_elex_glassworm_mafia_remcos
- Size 1.5MB
- Sample260714-ev9cbsd15m
- SHA256 79d1d29566759db3746f4f96da7a4a6ee5819646ddcdee4a1cbadd0be13701e7
- MD5 2c39020b66fccdcefdf12939a5c33c92
- SHA1 bceb4e34606a3e0bc116ef7077262d49990e8e07
- SHA512 7c2b2f195114793d860c8f583d14c83640069f219fd7439618df7fff83c1d602ccdea562ee89322dbfef634c226ae3b114ad1a86302ccb25c0979bc064a09c98
- SSDEEP 24576:8vrHWdZcy2s8DWxr9QHzd6TMV87BbkjCMvGdLtjp8SXdo8ke5i5Xh6wnBLTHTAck:Es6QRQTkTb7mGVtjWS1SZBnHTAsi
- TLSH T18F75AD1277E58035F1B36731693A931899BABCB29839840E73DC662D2F70691CE74B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-14_2c39020b66fccdcefdf12939a5c33c92_darkgate_elex_glassworm_mafia_remcos.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-14_2c39020b66fccdcefdf12939a5c33c92_darkgate_elex_glassworm_mafia_remcos
- Size 1.5MB
- SHA256 79d1d29566759db3746f4f96da7a4a6ee5819646ddcdee4a1cbadd0be13701e7
- MD5 2c39020b66fccdcefdf12939a5c33c92
- SHA1 bceb4e34606a3e0bc116ef7077262d49990e8e07
- SHA512 7c2b2f195114793d860c8f583d14c83640069f219fd7439618df7fff83c1d602ccdea562ee89322dbfef634c226ae3b114ad1a86302ccb25c0979bc064a09c98
- SSDEEP 24576:8vrHWdZcy2s8DWxr9QHzd6TMV87BbkjCMvGdLtjp8SXdo8ke5i5Xh6wnBLTHTAck:Es6QRQTkTb7mGVtjWS1SZBnHTAsi
- TLSH T18F75AD1277E58035F1B36731693A931899BABCB29839840E73DC662D2F70691CE74B73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1