General
- Target 2026-07-18_75452e6b7e545a9d3dbe46e0f469818c_darkgate_elex_glassworm_mafia_remcos
- Size 1.5MB
- Sample260718-jd7jmact9j
- SHA256 bc835bed305007477d2f7cdc028ef44f2f5a0905ad18d525a73ef2307d035a89
- MD5 75452e6b7e545a9d3dbe46e0f469818c
- SHA1 f79c2d4d31db220cd5d25d79979cf001f752eb0a
- SHA512 0e1c928e49712275395c7bc65e04d4ed63592a1a04f8549e480701ac73743caa49dc97de8b0748ea8b67fbbc319323a92359972c85e7882b00292bbac30d6028
- SSDEEP 24576:ivrHWdZcy2dsTWnXDQHzxGTMV87BbkjCMvGdLtJy7Ttbd6VtLKmYqBm/KjdM+H:2svmzQTITb7mGVtyxbd6VtmmYob
- TLSH T12375BD2277E58035F1B36731A93A931459BABCB29839840E73DC662D1FB0691CE74B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-18_75452e6b7e545a9d3dbe46e0f469818c_darkgate_elex_glassworm_mafia_remcos.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-18_75452e6b7e545a9d3dbe46e0f469818c_darkgate_elex_glassworm_mafia_remcos
- Size 1.5MB
- SHA256 bc835bed305007477d2f7cdc028ef44f2f5a0905ad18d525a73ef2307d035a89
- MD5 75452e6b7e545a9d3dbe46e0f469818c
- SHA1 f79c2d4d31db220cd5d25d79979cf001f752eb0a
- SHA512 0e1c928e49712275395c7bc65e04d4ed63592a1a04f8549e480701ac73743caa49dc97de8b0748ea8b67fbbc319323a92359972c85e7882b00292bbac30d6028
- SSDEEP 24576:ivrHWdZcy2dsTWnXDQHzxGTMV87BbkjCMvGdLtJy7Ttbd6VtLKmYqBm/KjdM+H:2svmzQTITb7mGVtyxbd6VtmmYob
- TLSH T12375BD2277E58035F1B36731A93A931459BABCB29839840E73DC662D1FB0691CE74B73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1