General
- Target 2026-07-20_dfcb733267dc415e3da29722f5625958_darkgate_elex_glassworm_mafia_remcos
- Size 1.5MB
- Sample260720-cygqdafs71
- SHA256 21377ff4c33cd32ed94ed9474aabcf44bbd13674fb26e4f3744d6143c188ddaf
- MD5 dfcb733267dc415e3da29722f5625958
- SHA1 dcc79e7423cfa1999bf2844f8d7271e0f6a16091
- SHA512 ed601fa33a3333444cf1b71904c3408727e7f9921a7fff9b31af86540349461a6364d97333589d7d01fcbc05a9cf9454e1bea9c9089e3f0a197f246b2d16390b
- SSDEEP 24576:ivrHWdZcy20ybW/H3QHz1dTMV87BbkjCMvGdLtRT7Jckdwi6i9bNrqq4E41WFpWc:2sceXQTjTb7mGVth7Jckdwi3N7+WTW3
- TLSH T17675BD1277E58035F2B36731993A931499BABCB29839840E73DC666D2F70691CE74B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_dfcb733267dc415e3da29722f5625958_darkgate_elex_glassworm_mafia_remcos.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_dfcb733267dc415e3da29722f5625958_darkgate_elex_glassworm_mafia_remcos
- Size 1.5MB
- SHA256 21377ff4c33cd32ed94ed9474aabcf44bbd13674fb26e4f3744d6143c188ddaf
- MD5 dfcb733267dc415e3da29722f5625958
- SHA1 dcc79e7423cfa1999bf2844f8d7271e0f6a16091
- SHA512 ed601fa33a3333444cf1b71904c3408727e7f9921a7fff9b31af86540349461a6364d97333589d7d01fcbc05a9cf9454e1bea9c9089e3f0a197f246b2d16390b
- SSDEEP 24576:ivrHWdZcy20ybW/H3QHz1dTMV87BbkjCMvGdLtRT7Jckdwi6i9bNrqq4E41WFpWc:2sceXQTjTb7mGVth7Jckdwi3N7+WTW3
- TLSH T17675BD1277E58035F2B36731993A931499BABCB29839840E73DC666D2F70691CE74B33
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1