General
- Target 2026-07-20_2edaef2870c5d93d4a094090bc386953_darkgate_elex_glassworm_mafia_remcos
- Size 1.5MB
- Sample260720-dwq2psdx9k
- SHA256 b2575803d59e3ecf87e95f9b85cfecbc275d281a02c04b2e81222e70b548ba19
- MD5 2edaef2870c5d93d4a094090bc386953
- SHA1 6400a336ff3017643326fd8acd8bd070f2744ba6
- SHA512 af75e2c91b8d618256c52834a8b0c8daa7f6b5fa5325ee5aae094c325d3c171d7b5f1cde80971d72e567479ab9ce402414d4a68cbb849772a46cf0ab03dccd0a
- SSDEEP 24576:ivrHWdZcy20ybW/H3QHz1dTMV87BbkjCMvGdLtcT7Jckdwi6i9bNrqq4E41WFpWc:2sceXQTjTb7mGVtO7Jckdwi3N7+WTW3
- TLSH T11875BD1277E58035F2B36731993A931499BABCB29839840E73DC666D2F70691CE74B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_2edaef2870c5d93d4a094090bc386953_darkgate_elex_glassworm_mafia_remcos.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_2edaef2870c5d93d4a094090bc386953_darkgate_elex_glassworm_mafia_remcos
- Size 1.5MB
- SHA256 b2575803d59e3ecf87e95f9b85cfecbc275d281a02c04b2e81222e70b548ba19
- MD5 2edaef2870c5d93d4a094090bc386953
- SHA1 6400a336ff3017643326fd8acd8bd070f2744ba6
- SHA512 af75e2c91b8d618256c52834a8b0c8daa7f6b5fa5325ee5aae094c325d3c171d7b5f1cde80971d72e567479ab9ce402414d4a68cbb849772a46cf0ab03dccd0a
- SSDEEP 24576:ivrHWdZcy20ybW/H3QHz1dTMV87BbkjCMvGdLtcT7Jckdwi6i9bNrqq4E41WFpWc:2sceXQTjTb7mGVtO7Jckdwi3N7+WTW3
- TLSH T11875BD1277E58035F2B36731993A931499BABCB29839840E73DC666D2F70691CE74B33
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1