General
- Target 2026-07-20_f264d122a70b043f19e1462c60a8a4a5_darkgate_elex_glassworm_mafia_remcos
- Size 1.5MB
- Sample260720-cvpltae161
- SHA256 fac58e869de7159075d839fa5d4e261f91e0809e53971d1423b8460bc4c64369
- MD5 f264d122a70b043f19e1462c60a8a4a5
- SHA1 f1c6addee1575c1520848cec989de58ff1c91260
- SHA512 e79068d8936a74c2e94184c19aec590a9f888dfbadd7e1b8c454b749f9064e1fce55ad82324f3006e4dce432f1cedbd44a039a2364dbceacdc3f582a2e9af3f0
- SSDEEP 24576:yvrHWdZcy2cTTWHr9QHzwvTMV87BbkjCMvGdLt7PBasaU5oL9eJwoz3lYjWNdK7:msJepQTmTb7mGVtWUU9eJwOCCNM
- TLSH T14B75BD2277E58035F5B36731593A931499BABCB29839840E73DC662D2F706E1CE64B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_f264d122a70b043f19e1462c60a8a4a5_darkgate_elex_glassworm_mafia_remcos.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_f264d122a70b043f19e1462c60a8a4a5_darkgate_elex_glassworm_mafia_remcos
- Size 1.5MB
- SHA256 fac58e869de7159075d839fa5d4e261f91e0809e53971d1423b8460bc4c64369
- MD5 f264d122a70b043f19e1462c60a8a4a5
- SHA1 f1c6addee1575c1520848cec989de58ff1c91260
- SHA512 e79068d8936a74c2e94184c19aec590a9f888dfbadd7e1b8c454b749f9064e1fce55ad82324f3006e4dce432f1cedbd44a039a2364dbceacdc3f582a2e9af3f0
- SSDEEP 24576:yvrHWdZcy2cTTWHr9QHzwvTMV87BbkjCMvGdLt7PBasaU5oL9eJwoz3lYjWNdK7:msJepQTmTb7mGVtWUU9eJwOCCNM
- TLSH T14B75BD2277E58035F5B36731593A931499BABCB29839840E73DC662D2F706E1CE64B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Executes dropped EXE
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1