General
- Target 2026-07-21_720c4d8ed833a2cec934b08d47c93978_darkgate_elex_glassworm_mafia_remcos
- Size 1.5MB
- Sample260721-c3mgeset2s
- SHA256 01303f3d78e7e192e9ef77d527e87fec2afb6b3108f7cc10ffeac22b8c86b0a3
- MD5 720c4d8ed833a2cec934b08d47c93978
- SHA1 313d2335e07d46f76349dbd6684ea75343cccf17
- SHA512 ac3daaa1f641a954dc3b3e8c55057f4896d048ede485ef97963a8c34e1b0d96f58dfdff24bcd5560abb7df15d992367ed9615bb818e5f7e2b9e78ebd6c09635a
- SSDEEP 24576:yvrHWdZcy2MDmWbryQHzLlTMV87BbkjCMvGdLtqFyRW+HcitzVYb9:msUOmQTpTb7mGVtJoOrzV+
- TLSH T17175AD1277E58035F1B36731993A93149ABABCB29839840E73DC666D2F70691CE34B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-21_720c4d8ed833a2cec934b08d47c93978_darkgate_elex_glassworm_mafia_remcos.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-21_720c4d8ed833a2cec934b08d47c93978_darkgate_elex_glassworm_mafia_remcos
- Size 1.5MB
- SHA256 01303f3d78e7e192e9ef77d527e87fec2afb6b3108f7cc10ffeac22b8c86b0a3
- MD5 720c4d8ed833a2cec934b08d47c93978
- SHA1 313d2335e07d46f76349dbd6684ea75343cccf17
- SHA512 ac3daaa1f641a954dc3b3e8c55057f4896d048ede485ef97963a8c34e1b0d96f58dfdff24bcd5560abb7df15d992367ed9615bb818e5f7e2b9e78ebd6c09635a
- SSDEEP 24576:yvrHWdZcy2MDmWbryQHzLlTMV87BbkjCMvGdLtqFyRW+HcitzVYb9:msUOmQTpTb7mGVtJoOrzV+
- TLSH T17175AD1277E58035F1B36731993A93149ABABCB29839840E73DC666D2F70691CE34B73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1