General
- Target 2026-07-17_87e4e1b69af1c20cf928a726f6b67cc9_elex_glassworm_mafia_remcos
- Size 1.2MB
- Sample260717-jm698aas3s
- SHA256 cec4e05eeec271a00edda0d6d31a64fecf50d501be9fea5a993dfc6cdf6b4e8c
- MD5 87e4e1b69af1c20cf928a726f6b67cc9
- SHA1 3d8c9a392a6caccde536b620e14f3d049bc2eecf
- SHA512 3d81dd84ca372ee8a3e286c60e66d86c2332a4be3caca8fc924941e5efabcc128bacd982478d61498b4f1293ff81abd7ee73ec64b8799190103e6581b8923331
- SSDEEP 24576:OhfDc6X3lQMJxr4cQFTj0OZeVJEQm8BACccW1hVGk987JdGOlHYXHT8C:Nul1JqcQFTIOZeAqcDyrldGOlH3
- TLSH T17045E01EBAF1C032C06311349D6ED358A2B5E4B188260857BBED671D2F715D39B39BA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-17_87e4e1b69af1c20cf928a726f6b67cc9_elex_glassworm_mafia_remcos.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-17_87e4e1b69af1c20cf928a726f6b67cc9_elex_glassworm_mafia_remcos
- Size 1.2MB
- SHA256 cec4e05eeec271a00edda0d6d31a64fecf50d501be9fea5a993dfc6cdf6b4e8c
- MD5 87e4e1b69af1c20cf928a726f6b67cc9
- SHA1 3d8c9a392a6caccde536b620e14f3d049bc2eecf
- SHA512 3d81dd84ca372ee8a3e286c60e66d86c2332a4be3caca8fc924941e5efabcc128bacd982478d61498b4f1293ff81abd7ee73ec64b8799190103e6581b8923331
- SSDEEP 24576:OhfDc6X3lQMJxr4cQFTj0OZeVJEQm8BACccW1hVGk987JdGOlHYXHT8C:Nul1JqcQFTIOZeAqcDyrldGOlH3
- TLSH T17045E01EBAF1C032C06311349D6ED358A2B5E4B188260857BBED671D2F715D39B39BA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1