General
- Target 2026-07-18_1823ead92ea0acca7c086726cf124a70_darkgate_elex_glassworm_mafia_remcos
- Size 1.5MB
- Sample260718-knfdkaet2l
- SHA256 8dc355c95d9684e4ad37f06594008841aa90f5a7a146ca91608d66ac8fc1e9f1
- MD5 1823ead92ea0acca7c086726cf124a70
- SHA1 a4f07109d9c7265e256bb7a4f0bcfa718374a6e4
- SHA512 67f6f547b0f1405ffb8120a6e82344bd4ff3ba8a8d81c2dd271e2ec9d3f67c1d4fcf7050cb0166c050d35371483c7561f8121be3f361b9c34d94e0c82dc12c35
- SSDEEP 24576:ivrHWdZcy2dsTW0X8QHzsoTMV87BbkjCMvGdLtGlt3qs2MpfvlY1D/fjxX:2svZsQTRTb7mGVtQBqBMFveDTZ
- TLSH T10B75BD1237E58035F1B36731A93A931499BABCB29839840E73DC666D2F70691CE74B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-18_1823ead92ea0acca7c086726cf124a70_darkgate_elex_glassworm_mafia_remcos.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-18_1823ead92ea0acca7c086726cf124a70_darkgate_elex_glassworm_mafia_remcos
- Size 1.5MB
- SHA256 8dc355c95d9684e4ad37f06594008841aa90f5a7a146ca91608d66ac8fc1e9f1
- MD5 1823ead92ea0acca7c086726cf124a70
- SHA1 a4f07109d9c7265e256bb7a4f0bcfa718374a6e4
- SHA512 67f6f547b0f1405ffb8120a6e82344bd4ff3ba8a8d81c2dd271e2ec9d3f67c1d4fcf7050cb0166c050d35371483c7561f8121be3f361b9c34d94e0c82dc12c35
- SSDEEP 24576:ivrHWdZcy2dsTW0X8QHzsoTMV87BbkjCMvGdLtGlt3qs2MpfvlY1D/fjxX:2svZsQTRTb7mGVtQBqBMFveDTZ
- TLSH T10B75BD1237E58035F1B36731A93A931499BABCB29839840E73DC666D2F70691CE74B73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1