General
- Target 2026-07-18_bcca2f3b51c566c425c3f12c2be6eefd_darkgate_elex_glassworm_mafia_remcos
- Size 1.5MB
- Sample260718-g9vtlaet3s
- SHA256 0a21ba1640079201537ea6d6e1657fc7313b612f184d5f8b6d22b06b5532759e
- MD5 bcca2f3b51c566c425c3f12c2be6eefd
- SHA1 f7bacdcdc2e3a5121de1d1fc2e3359be93290b50
- SHA512 7ecc2e0894df588ab30e644808318ba4fd0b5fd34af554bb4dc295466ba17ad7421438a7ac2172aaf09525770cdcf8a7462d96f66532916c44f6db811e4b64e8
- SSDEEP 24576:ivrHWdZcy2dsTWRXnQHzsMTMV87BbkjCMvGdLtSUYwFSogf8ZK1+pWZlFmH:2svc3QTpTb7mGVtSUEogkmDFm
- TLSH T15F75AD2277E58035F2B36731593A931499BAFCB29839840E73DC662D1F706A18E74B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-18_bcca2f3b51c566c425c3f12c2be6eefd_darkgate_elex_glassworm_mafia_remcos.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-18_bcca2f3b51c566c425c3f12c2be6eefd_darkgate_elex_glassworm_mafia_remcos
- Size 1.5MB
- SHA256 0a21ba1640079201537ea6d6e1657fc7313b612f184d5f8b6d22b06b5532759e
- MD5 bcca2f3b51c566c425c3f12c2be6eefd
- SHA1 f7bacdcdc2e3a5121de1d1fc2e3359be93290b50
- SHA512 7ecc2e0894df588ab30e644808318ba4fd0b5fd34af554bb4dc295466ba17ad7421438a7ac2172aaf09525770cdcf8a7462d96f66532916c44f6db811e4b64e8
- SSDEEP 24576:ivrHWdZcy2dsTWRXnQHzsMTMV87BbkjCMvGdLtSUYwFSogf8ZK1+pWZlFmH:2svc3QTpTb7mGVtSUEogkmDFm
- TLSH T15F75AD2277E58035F2B36731593A931499BAFCB29839840E73DC662D1F706A18E74B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Executes dropped EXE
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1