General
- Target 2026-07-17_3bf29feccd5e38325fdd777788ef6e98_darkgate_elex_glassworm_mafia_remcos
- Size 1.5MB
- Sample260717-j48jlsft2j
- SHA256 980ddeca736b858f13bb0f2a206147491343cc4bbeef07857eec09350629daca
- MD5 3bf29feccd5e38325fdd777788ef6e98
- SHA1 e8a3b7964a5f7b7c7d7140c32d16585aea801ab4
- SHA512 39b8352079a92005c5253831c9294a0fcaa7e36273713f01638adf0f26fd1c67f9cd043bd07f70c63565345dd2049b6b519ac500c432ba8e916747a582c3a245
- SSDEEP 24576:ivrHWdZcy2dEgWNrZQHzidTMV87BbkjCMvGdLthcnUJd/vJ/vA5kwzlUoq:2sg8dQTeTb7mGVthVbh/vAqslUoq
- TLSH T1AA75AD2277E58035F1B36731593A931899BABCB29839C40E73DC662D2F706918E74B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-17_3bf29feccd5e38325fdd777788ef6e98_darkgate_elex_glassworm_mafia_remcos.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-17_3bf29feccd5e38325fdd777788ef6e98_darkgate_elex_glassworm_mafia_remcos
- Size 1.5MB
- SHA256 980ddeca736b858f13bb0f2a206147491343cc4bbeef07857eec09350629daca
- MD5 3bf29feccd5e38325fdd777788ef6e98
- SHA1 e8a3b7964a5f7b7c7d7140c32d16585aea801ab4
- SHA512 39b8352079a92005c5253831c9294a0fcaa7e36273713f01638adf0f26fd1c67f9cd043bd07f70c63565345dd2049b6b519ac500c432ba8e916747a582c3a245
- SSDEEP 24576:ivrHWdZcy2dEgWNrZQHzidTMV87BbkjCMvGdLthcnUJd/vJ/vA5kwzlUoq:2sg8dQTeTb7mGVthVbh/vAqslUoq
- TLSH T1AA75AD2277E58035F1B36731593A931899BABCB29839C40E73DC662D2F706918E74B73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1